A slightly more specific link for OAuth is: Authentication
But if you’re doing a Chrome extension, and don’t otherwise want to employ OAuth, I have good news: You don’t need to.
Extensions are special because the user’s browser already has an Asana token and you can piggyback off it.
Start here:
and here (or around here):
Larry