OAuth Courses and Certifications

OAuth 2.0 - It's the Implementation, Stupid

Explore OAuth 2.0 implementation, covering key concepts, grant types, and security considerations for robust authentication and authorization in web applications.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

NDC Conferences

Supercharging OAuth 2.0 Security

Explore advanced OAuth 2.0 security features like Resource Indicators, JAR, PAR, and DPoP for implementing robust authentication in high-stakes environments.

• YouTube
• 55 minutes
• Self-Paced
• Free Video

Red Canary

A Real-World Look at an OAuth Attack

Explore OAuth security vulnerabilities through a real-world attack case study, learning to identify malicious applications and audit permissions effectively.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

Black Hat

Back to the Future - Hacking and Securing Connection-based OAuth Architectures

Uncover critical vulnerabilities in connection-based OAuth architectures used by AI agents and integration platforms, with practical exploits and security best practices.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Devoxx Poland

OAUTH 2.1 Explained Simply - Even If You Are Not a Developer

Understand OAuth 2.1 fundamentals in simple terms, exploring key concepts and implementation details accessible to both developers and non-technical audiences.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

GOTO Conferences

A Deep Dive into OAuth: Past, Present, and Future

Dive into OAuth's evolution, from eliminating password sharing to modern enterprise security. Learn authentication protocols, token management, and emerging trends for building secure, scalable applications.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

NDC Conferences

Supercharging OAuth 2.0 Security - Advanced Features and Implementation

Master advanced OAuth 2.0 security features including Resource Indicators, JAR, PAR, and DPoP for high-stakes implementations in eHealth and financial scenarios.

• YouTube
• 1 hour
• Self-Paced
• Free Video

ng-conf

Step Up Your Authentication Game - Implementing OAuth Step-Up Authentication in Angular

Explore step-up authentication for enhanced security in Angular apps. Learn standardized methods to implement elevated authentication for sensitive resources and actions.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

NahamSec

OAuth Secret: Advanced Exploitation Techniques - NahamCon 2024

Explore advanced OAuth exploitation techniques beyond simple redirect_uri attacks. Learn to chain multiple vulnerabilities for successful account takeovers in modern web applications.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

Linode

Secure Flask Applications with OAuth Multi-Provider Authentication

Master OAuth authentication implementation in Flask applications with GitHub and Google provider integrations for enhanced security and streamlined user access management.

• YouTube
• 18 minutes
• Self-Paced
• Free Video

Rawkode Academy

Connecting Zitadel with GitHub OAuth - Complete Guide to Zitadel

Discover how to integrate GitHub OAuth with Zitadel for seamless social logins, covering step-by-step configuration, security best practices, and custom Actions for enhanced authentication.

• YouTube
• 10 minutes
• Self-Paced
• Free Video

USENIX

Universal Cross-app Attacks - Exploiting and Securing OAuth 2.0 in Integration Platforms

Uncover critical OAuth 2.0 vulnerabilities in integration platforms through systematic analysis of cross-app attacks and security flaws affecting major tech companies.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

NDC Conferences

Breaking and Securing OAuth 2.0 in Frontends

Dive into OAuth 2.0 security for frontend applications, exploring vulnerabilities, best practices, and the Backend-For-Frontend approach with Philippe De Ryck, co-author of the OAuth 2.0 specification for browser-based apps.

• YouTube
• 1 hour
• Self-Paced
• Free Video

Black Hat

Consent and Compromise - Abusing Entra OAuth for Fun and Access to Internal Microsoft Applications

Discover critical OAuth misconfigurations in Microsoft Entra ID that enabled unauthorized access to 20+ internal Microsoft applications, exposing sensitive data and admin privileges.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

BSidesLV

eXes and OAuths They Haunt Me - In-Depth Analysis of OAuth/OIDC Misconfigurations and Token Replay Attacks

Explore OAuth/OIDC vulnerabilities through live demos of token replay attacks, misconfigurations, and learn actionable mitigation strategies using open-source tools.

• YouTube
• 49 minutes
• Self-Paced
• Free Video