This course introduces OAuth 2.0 authentication using mock Google providers. Learn OAuth fundamentals, implement authorization code flow, and integrate with your Java/Spring Boot pastebin application. Follows an offense-defense approach, demonstrating vulnerabilities before implementing secure solutions.
Overview
Syllabus
- Unit 1: Introduction to OAuth
- OAuth Fundamentals Quiz Task
- Unit 2: Mock OAuth Implementation
- Implementing Template Serving for OAuth Consent Screens
- OAuth Success Handler Implementation
- Debugging OAuth Success Handlers for JWT Token Generation
- Unit 3: Modifying the User Model
- Update User Model for OAuth Authentication
- Add Email Field to User Model for OAuth Integration
- Add Provider Field to User Model
- Unit 4: OAuth State and CSRF Protection
- Implementing State Generation for Secure OAuth Flows
- Implementing State Validation for Secure OAuth Callback Routes
- Implementing Secure OAuth State Validation and CSRF Protection
- Unit 5: OAuth Error Handling
- OAuth Error Handling Integration Task
- Integrating Centralized Error Handling into OAuth Routes