A development team is building a mobile app that needs to read a user's calendar events from a third-party cloud service on the user's behalf. The team wants the user to grant limited, revocable permission without the app ever handling the user's password for the calendar service. Which protocol is specifically designed to provide this delegated authorization?