OAuth 2.1 And OpenID Connect

on YouTube ↗31m

" summary

Explains OAuth 2.1 and OpenID Connect through a car-key analogy, using Facebook as a live example to show an app requesting an access token without grabbing personal ID data, and a browser redirect flow that issues a short-lived access token (~5 minutes). Demonstrates scope control (what the app can do), shows the token being used to post or act on behalf of the user, and notes common user confusions and how revocation and limited scopes mitigate risks.

AI-written summary · about

" chapters (7)

1. 0:00Introduction to OAuth 2.1
2. 2:38How OAuth works with apps
3. 11:19Facebook login example
4. 20:22Security and data access
5. 26:23Practical use cases
6. 28:43Demo walkthrough
7. 30:20Conclusion and thanks

" related talks

• 33mOAuth and OpenID Connect Deep DiveTravis Spencer · Nordic APIs Stockholm 2013
• 19mOAuth and OpenID Connect in Plain EnglishNate Barbettini · GOTO Chicago 2020
• 47mIntroduction to OAuth 2.0 and OpenID ConnectPhilippe De Ryck · GOTO Berlin 2018
• 28mOAuth 2.0 and OIDCSara Daqiq · Silicon Valley Code Camp 2018
• 58mOAUTH, OPENID CONNECT & .NET – THE GOOD PARTSAnders Abel · NDC London 2024
• 48mExplain it to Me Like I’m 5: Oauth2 and OpenIDDaniel Mikusa · SpringOne 2020
• 45mMastering OAuth 2.0 and OpenID ConnectLeonardo Micheloni · Codemotion Madrid 2025
• 01h 00mImplementing OpenID Connect and OAuth 2.0 – Tips from the TrenchesDominick Baier · NDC Security Oslo 2020