OAuth 2.0 is the go-to solution for API security, bringing authorization and delegation to modern HTTP APIs. In this course, Getting Started with OAuth 2.0, you’ll learn the fundamentals of OAuth and why it is preferred over past solutions. First, you’ll explore each grant type and flow in detail, looking at their strengths and weaknesses, and when they should be used or not. Next, you’ll take a close look at native applications such as mobile apps, and their unique security issues when using OAuth. Finally, you’ll learn some common extensions to the OAuth protocols, such as OpenID Connect and the upcoming OAuth device flow. All of this will be covered without using any particular programming language or stack. When you’re finished with this course, you will know how to integrate with any OAuth 2 authorization server and architect the right solution for you.
Author Name: Scott Brady
Author Description:
Scott Brady is a software developer specializing in identity and access management. Focusing on ASP.NET, Scott has increasingly found himself in undocumented territory, piecing together the facts and attempting to pass them on so that others don’t have to go through the same. Scott currently work as a Senior Software Engineer for Rock Solid Knowledge and is a contributor to the IdentityServer OSS project, the leading OpenID Connect and OAuth framework for .NET.

Table of Contents

• Course Overview
  1min
• API Security 101
  23mins
• OAuth in Detail
  40mins
• Best Practices for Native Applications
  16mins
• Best Practices for Browser-based Applications
  9mins
• Extending OAuth
  28mins