Implementing OAuth2.0

Mark Horstmeier

Thursday 13 July 2017 from 10:30 to 11:20

Talk in English - US at OpenWest Conference 2017
Track Name: 300A - Programming
Short URL: https://joind.in/talk/2d513 (QR-Code (opens in new window))

Avg. Rating

Facebook, Google and Twitter have made OAuth a common standard in API authentication, but not all OAuth is created equal. The authorization code (server side) flow is the closest OAuth2.0 implementation to the OAuth1.0a specification and provides the *most* security.

While you may not need to write your own OAuth server, understanding the fundamentals will help you navigate the OAuth client dance which is base requirement to consuming API resources from Google, Facebook and many other services.

I will show you the structure of an OAuth2.0 server implementation which leverages the Apache HTTP authentication handlers to provide token based access to sensitive resources.

[160]

Comments

Comments are closed.

Madhumita Das at 13:06 on 23 Jul 2017

I missed the first session on 12th. Session was little difficult to understand, as Mark was referring to the first session some time