Glossary
What is OAuth (and how does social login work)?
OAuth is an open standard that lets an app access your account on another service without ever seeing your password. You approve specific permissions (scopes) on the provider's own site, and the app receives a limited, revocable access token.
How the flow works
You're redirected to the provider (e.g. Instagram), sign in there and approve the requested scopes. The provider returns a scoped access token to the app — your password is never shared with it.
Scopes and revocation
Tokens are limited to the scopes you approved and can be revoked at any time from the provider or the app. This is far safer than handing over a password.
OAuth in Modiva
Modiva runs the OAuth flow for every platform, stores the resulting token envelope-encrypted, and refreshes it automatically — so you connect once and never handle secrets.
FAQ
Does the app see my password with OAuth?
No — you authenticate on the provider's own site and the app only receives a scoped token.
How does Modiva store OAuth tokens?
Envelope-encrypted (AES-256-GCM + KMS), with automatic refresh and one-click disconnect.