Submit

Login Login

Register Register

Home / Journals / CMC / Online First / doi:10.32604/cmc.2026.086887
Journal Menu
Special Issues
Table of Content

All issues

Online First

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Open Access

ARTICLE

Cross-Provider OAuth Capability Topology: A Structural Network Analysis of Modern Authorization Ecosystems

Maryam Almarwani*
Department of Cybersecurity, College of Computer Science and Engineering, Taibah University, Medina, Saudi Arabia
* Corresponding Author: Maryam Almarwani. Email: email

Computers, Materials & Continua https://doi.org/10.32604/cmc.2026.086887

Received 06 June 2026; Accepted 12 August 2026; Published online 28 August 2026

Abstract

OAuth authorization ecosystems contain a large and diverse collection of capabilities distributed across multiple cloud platforms. Although previous studies have investigated OAuth security, privacy, and authorization management, the structural organization of authorization capabilities across providers has received limited attention. This study presents a cross-provider structural analysis of OAuth capabilities from seven major authorization platforms. A unified capability dictionary is constructed by normalizing publicly documented OAuth scopes into a common semantic representation. The normalized capabilities are transformed into an undirected semantic topology in which nodes represent capabilities and edges represent deterministic semantic relationships. Standard network analysis and community detection techniques are then applied to examine connectivity patterns, central capabilities, structural communities, and cross-provider bridges. The resulting topology contains 1599 capabilities connected by 6049 unique semantic relationships, forming 525 semantic communities with a modularity value of 0.9045 and 2307 cross-provider bridge relationships. Robustness analyses using random, degree-preserving, provider-label-permuted, text-similarity, and alternative rule-based topologies show that the observed modular organization cannot be explained by graph size or degree distribution alone, while the absolute number of cross-provider bridges remains sensitive to the adopted semantic matching criterion. The proposed methodology provides a reproducible structural representation of OAuth authorization ecosystems and can support future studies integrating semantic topology with operational authorization data.

Keywords

OAuth; OAuth scopes; authorization; network analysis; community detection; semantic topology; access control; cloud security

  • 36

    View

  • 8

    Download

  • 0

    Like

Related articles
Copyright© 2026 Tech Science Press
© 1997-2026 TSP (Henderson, USA) unless otherwise stated

Share Link