Why Do We Really Need OAuth Anyway?

on YouTube ↗33m

" summary

OAuth exists to give apps limited tokens instead of passwords so third parties get only the data they need and access can expire. It pairs with non‑phishable MFA like WebAuthn/FIDO (USB keys, Touch ID, Face ID) by tying credentials to domains, and it centralises login for many domains via services such as accounts.google.com. OpenID Connect adds user identity on top of OAuth, and using OAuth avoids building sign‑up, recovery and password‑reset flows.

AI-written summary · about

" chapters (8)

1. 0:00Start
2. 4:15LIMIT/DELEGATE ACCESS TO DATA
3. 12:11WHAT ABOUT FIRST-PARTY APPS?
4. 22:40REGISTRATION AND ACCOUNT RECOVERY
5. 27:50OAUTH PROVIDES ACCESS TO DATA
6. 30:23THE FUTURE?
7. 30:37HIGH SECURITY OAUTH
8. 30:49OAUTH FOR HEALTH AND FINANCE

" related talks

• 54mOAuth – the good PartsDominick Baier · NDC Oslo 2021
• 58mOAuth – the good PartsDominick Baier · NDC Porto 2022
• 29mFireside Chat About OAuth 2.0Aaron Parecki, Eric Johnson · GOTOpia February 2021
• 58mOAUTH, OPENID CONNECT & .NET – THE GOOD PARTSAnders Abel · NDC London 2024
• 19mOAuth and OpenID Connect in Plain EnglishNate Barbettini · GOTO Chicago 2020
• 27mIntegrating API Security Into A Comprehensive Identity PlatformPamela Dingle, Pam Dingle · Nordic APIs World Tour 2015
• 01h 00mOAuth – the good PartsAnders Abel · NDC Security 2023
• 31mOAuth 2.1 And OpenID ConnectAbdessamad Temmar · BlaBlaConf 2022