How is OAuth framework used in REST API?

OAuth's primary role is authorization using tokens, not hashing security information in the URL; sensitive data should typically not be in URLs.

OAuth is an authorization framework that allows a third-party application to obtain limited access to a user's resources on an HTTP service (like a REST API) by providing an access token. This token represents the user's consent and grants specific permissions, ensuring the external application never directly handles or stores the user's credentials.

OAuth's purpose is to grant delegated access securely, not to merely 'hide' security information in the URL, as tokens themselves are part of the security context.

OAuth specifically avoids providing user credentials directly to the external application; instead, it issues a temporary, limited-scope access token.