Getting Started with OAuth 2.0
|
OAuth 2.0 is the go-to solution for API security, bringing authorization and delegation to modern HTTP APIs. In this course, you’ll learn the fundamentals of OAuth, allowing you to architect and implement the right solution for your requirements.
OAuth 2.0 is the go-to solution for API security, bringing authorization and delegation to modern HTTP APIs. In this course, Getting Started with OAuth 2.0, you’ll learn the fundamentals of OAuth and why it is preferred over past solutions. First, you’ll explore each grant type and flow in detail, looking at their strengths and weaknesses, and when they should be used or not. Next, you’ll take a close look at native applications such as mobile apps, and their unique security issues when using OAuth. Finally, you’ll learn some common extensions to the OAuth protocols, such as OpenID Connect and the upcoming OAuth device flow. All of this will be covered without using any particular programming language or stack. When you’re finished with this course, you will know how to integrate with any OAuth 2 authorization server and architect the right solution for you.
Author Name: Scott Brady
Author Description:
Scott Brady is a software developer specializing in identity and access management. Focusing on ASP.NET, Scott has increasingly found himself in undocumented territory, piecing together the facts and attempting to pass them on so that others don’t have to go through the same. Scott currently work as a Senior Software Engineer for Rock Solid Knowledge and is a contributor to the IdentityServer OSS project, the leading OpenID Connect and OAuth framework for .NET.
Table of Contents
- Course Overview
1min - API Security 101
23mins - OAuth in Detail
40mins - Best Practices for Native Applications
16mins - Best Practices for Browser-based Applications
9mins - Extending OAuth
28mins
User Reviews
Be the first to review “Getting Started with OAuth 2.0”
Related Products
Cisco Enterprise Networks: Infrastructure Security
In this course, you'll learn how to configure DHCP snooping, IP source guard, dynamic ARP inspection (DAI), port security, storm control, RADIUS, and TACACS+.
Pluralsight LIVE 2018: Get Your Geek On (Security)
Safeguard your organization from threats by leveling up your security know-how.
Planning, Deploying, and Configuring Splunk Enterprise Security
Splunk Enterprise Security is a premium application used within the Splunk deployment to help with SOC operations. This course will teach you how to plan for, design, and deploy the application to use in your environment.
Building and Leading an Effective Threat Modeling Program
If you've seen the benefits of threat modeling in action and want to take this popular security approach to the next level, then this course will teach you how to plan, execute, and manage a threat modeling program at scale within your organization.
The IT Ops Sessions: Zero Trust Technologies – Designing and Deploying Microsegmentation
In this IT Ops session, you’ll learn to design and deploy microsegmentation throughout your enterprise.
Basic Security Concepts for Cisco Networks
The CCNA exam requires an understanding of basic security for networking. This course will review password policies, AAA, DHCP snooping, and Dynamic ARP inspection.
There are no reviews yet.