GOTO 2020 • The Secrets of OAuth 2.0 • Aaron Parecki & Eric Johnson

34:44 985 views 98% Published a month ago

This interview was recorded for the GOTO Book Club. #GOTOcon #GOTOBookClub
http://gotopia.tech/bookclub

Aaron Parecki - Author of "OAuth 2.0 Simplified"
Eric Johnson - Senior Developer Advocate at AWS Serverless

DESCRIPTION
The OAuth 2.0 authorization framework has become the industry standard in providing secure access to web APIs. It allows users to grant external applications access to their data, such as profile data, photos, and email, without compromising security. OAuth 2.0 Simplified is a guide to building an OAuth 2.0 server. Through high-level overviews, step-by-step instructions, and real-world examples, you will learn how to take advantage of the OAuth 2.0 framework while building a secure API.
The interview is based on Aaron Parecki's new book "OAuth 2.0 Simplified": https://amzn.to/2A3IMOf

TIMECODES
00:00 Series intro
00:48 Episode intro
01:09 The history of OAuth
03:15 Differences between OAuth 1 & 2
09:28 Differences between AuthN & AuthZ
15:06 Who is the target audience for this book?
16:28 Do you recommend building your own OAuth server?
19:34 What's a grant type and how does it work?
23:30 Advantages of short access & long refresh token periods
26:47 What is PKCE grant type in OAuth & how to use it
31:14 Key takeaways from the book
33:13 Outro

Read the full transcription of the interview here:
https://gotopia.tech/bookclub/episodes/the-secrets-of-oauth-2

RECOMMENDED BOOKS
https://amzn.to/2A3IMOf

https://twitter.com/GOTOcon
https://www.linkedin.com/company/goto-
https://www.facebook.com/GOTOConferences
#OAuth #OAuth2 #OAuth1 #Security #AuthN #AuthZ #PKCE #OAuthServer #Programming #AaronParecki #EricJohnson #Serverless #ProgrammingLanguages #Privacy

SUPPORTER
This episode of the GOTO Book Club was made possible thanks to the support of GOTOpia.tech. Created for developers, by developers, the GOTO event series goes beyond annual conferences held in Chicago, Amsterdam and Copenhagen: you can also join online conferences, online masterclasses and meetups with top creators and leaders in tech year-round.
And if joining one of these top-rated events isn't enough to satisfy your hunger for the latest in tech, you can watch over a thousand high-quality talks on the GOTO YouTube channel — subscribe now for ad-free videos released (almost) daily and join GOTO in person or online at any upcoming conferences using the promo code ‘bookclub’.
http://gotopia.tech

Looking for a unique learning experience?
Attend the next GOTO conference near you! Get your ticket at http://gotocon.com

SUBSCRIBE TO OUR CHANNEL - new videos posted almost daily.
https://www.youtube.com/user/GotoConferences/?sub_confirmation=1



Link Original video