I assume you meant it is not a protocol, which surely is stated in oauth.net [1]. Still it is a pretty much a standard though.

[1]: https://oauth.net/articles/authentication/