Modern Authentication 101
summary
Explains why modern systems use claims-based identity and leveraging existing identity stores rather than homegrown user tables, shows the difference between self-contained tokens and reference tokens, and compares SAML (heavy XML assertions) with compact JWT structure (header.payload.signature) including signing algs like RS256 vs HS256, issuer, audience and expiry. Walks through concrete OAuth/OpenIdConnect flows: implicit grant, authorization code grant, client credentials, device code and on-behalf-of, token and userinfo endpoints, and when each flow is appropriate.
AI-written summary · about
chapters (6)
- 0:00Introduction to modern auth
- 10:18Traditional identity problems
- 20:00Tokens and JWT basics
- 30:54OAuth and OpenID Connect
- 42:53Choosing the right flow
- 43:54Q&A on identity trust
related talks
49mModern Authentication with OpenID Connect
01h 02mModern Authentication
28mGetting to know your users
36mTo Identity and Beyond
44mPresentation on Security Standards and Protocols
44mThe Art of Authentication for Web Apps
30mInsecurity protocols: an overview of modern authentication
40mModern Identity Management