Web Security: OAuth and OpenID Connect

English | 1h 44m | Video 720p | Subtitles | Project File

While many technical professionals claim to know and understand OAuth, reality often suggests otherwise. Implementing the proper grant types and the required flows while securely protecting your secrets is challenging at best and catastrophic at worst. Fundamentally, professionals often struggle with OAuth because they misunderstand what it is, what use cases it is particularly good and bad at, and how to integrate it smoothly and safely into their systems. In this course, Keith Casey reviews the basics of OAuth 2.0 and OpenID Connect and shows how to use them to authenticate your applications. He covers tokens and scopes; designing and building the key flows; common security considerations; and more.

Topics include:

 

What is OAuth 2.0?

Making OAuth 2.0 useful with extensions

Extending OAuth 2.0 with OpenID Connect

OAuth tokens and their usage

Common security considerations

Resource owner password flow

Client credential flow

Configuring an OAuth server in PHP and Node.js

 

Homepage:

https://www.lynda.com/OAuth-tutorials/Web-Security-OAuth-OpenID-Connect-REVISION-2019/2816000-2.html