[eluser]Peng Kong[/eluser]
with v0.5 only authentication (via traditional username/password, OpenID and Facebook Connect) plus account management (managing username, password, emails, etc) is done.
oauth is basically the authorization part. It's authorization delegation to third parties.
meaning third party website can request your users to share their data residing on your website.
most people won't be too concerned with this, unless you're offering a API like twitter, flickr, vimeo, etc
the other part which more people will be interested in will be role based access control. meaning having users who are admins, moderators etc. i.e. only 'admins' can access website settings page. only 'moderator' can do something else, etc. You will get to define the roles and what each role can do on your website.
