"Sign in with Google" and "Connect your GitHub account" feel simple, but behind them is a careful protocol. OAuth 2.0 lets one app act on your behalf at another service without ever seeing your password.