oauth2 is an authorization delegation framework (RFC 6749) allowing a resource owner to grant a third party limited access to their resources without sharing credentials. Not an authentication protocol on its own — that's a common misuse. Issues access tokens; token shape and semantics are left to the implementation.