Mastering OAuth 2.0 and OpenID Connect

on YouTube ↗45m

" summary

Covers practical explanations of OAuth 2.0 and OpenID Connect for authorization and authentication in modern apps, describing common flows (Authorization Code, Device Code, CIBA, Client Credentials) and concepts such as Reference Tokens to improve security. Focuses on helping developers choose the right flow for web apps or server-to-server services and avoid common mistakes.

AI-written summary · about

" chapters (8)

1. 0:00Introduction
2. 7:51What is OAuth 2.0?
3. 12:47Client Credentials flow
4. 19:55OAuth 2.0 flow types
5. 27:40Authorization Code flow
6. 34:03OpenID Connect and tokens
7. 39:40Other flows and tips
8. 42:04FAQ

" related talks

• 47mIntroduction to OAuth 2.0 and OpenID ConnectPhilippe De Ryck · GOTO Berlin 2018
• 49mModern Authentication with OpenID ConnectMartin Ullrich · Update Conference Prague 2019
• 33mOAuth and OpenID Connect Deep DiveTravis Spencer · Nordic APIs Stockholm 2013
• 45mDemystifying OAuth2 and OIDCNejmeddine Ben Ouarred · DevFest Toulouse 2025
• 01h 00mImplementing OpenID Connect and OAuth 2.0 – Tips from the TrenchesDominick Baier · NDC Security Oslo 2020
• 19mOAuth and OpenID Connect in Plain EnglishNate Barbettini · GOTO Chicago 2020
• 28mOAuth 2.0 and OIDCSara Daqiq · Silicon Valley Code Camp 2018
• 01h 05mCommon mistakes and misconceptions in Web App Security using OAuth 2.0 and OpenId ConnectNahid Farrokhi · NDC Sydney 2020