A Deep Dive into OAuth: Past, Present, and Future

Explore the evolution and future of OAuth in this 46-minute conference talk from GOTO Chicago 2024. Learn how OAuth emerged as a solution to protect users from sharing credentials with third-party apps, and discover its transformation into a cornerstone of modern identity and access management. Delve into essential topics including the password anti-pattern, OAuth 2.0 fundamentals, the streamlined OAuth 2.1 specification, and OpenID Connect integration. Master the distinctions between front-channel and back-channel communications, examine recent OAuth extensions, and understand sender-constrained access tokens. Gain practical insights into emerging authentication trends and evaluate enterprise-readiness criteria for applications. Through detailed examples and real-world scenarios, gain comprehensive knowledge of securing applications at scale and implementing next-generation identity protocols.