The Secrets of OAuth 2.0 Part 1/2

Dive into the first part of an in-depth interview exploring OAuth 2.0 with Aaron Parecki, author of "OAuth 2.0 Simplified," and Eric Johnson, Senior Developer Advocate at AWS Serverless. Learn about the history of OAuth, differences between versions 1 and 2, authentication vs. authorization, grant types, token management, and the PKCE grant type. Gain valuable insights into building secure APIs and understanding the OAuth 2.0 framework, suitable for developers and security professionals alike.

Syllabus

Series intro
Episode intro
The history of OAuth
Differences between OAuth 1 & 2
Differences between AuthN & AuthZ
Who is the target audience for this book?
Do you recommend building your own OAuth server?
What's a grant type and how does it work?
Advantages of short access & long refresh token periods
What is PKCE grant type in OAuth & how to use it
Key takeaways from the book
Outro