Summary

This course provides a comprehensive overview of OAuth, incorporating the latest recommendations from the OAuth working group. It covers the OAuth authorization code flow, security goals outlined by FAPI and related extensions, and potential attacks to be mitigated, including the rationale for removing Implicit and Password grants from the specification and the use of PKCE across various application types.

Title

OAuth 2.0 Simplified - A guide to building OAuth 2.0 servers

Description

OAuth 2.0 Simplified - A guide to building OAuth 2.0 servers

Keywords

security, authorization, will, access, part, building, server, course, applications, data, aaron, guide, email, using, flows, apis, attacks

Upstreams

aaronparecki.com, viewsourceconf.org

Downstreams

oauth.net, indieweb.org, twitter.com, aaronparecki.com, okta.com

NS Lookup

A 45.79.83.22

Dates

Created 2024-10-13

Updated 2026-01-01

Summarized 2026-02-28