OAUTH 2.1 Explained Simply (even if you’re not a dev)
summary
Explains OAuth 2.1 and the core OAuth2 concepts (roles, authorization flows) using everyday-life analogies so non-developers and developers can understand them. Covers why OAuth is used for delegated authorization on the web and walks through the different flows and their purposes to demystify the standard.
AI-written summary · about
chapters (11)
- 0:00Welcome
- 2:15Revocation problem
- 6:46Third-party auth
- 11:41Impersonation risks
- 17:20OAuth 2.1 terms
- 21:56Squatting and insecure channels
- 27:14Secure token hand-off
- 33:44Demo of flaws
- 40:50Code Flow with PKCE
- 42:40Scopes and access limits
- 45:13OAuth 2.1 best practices
related talks
40mOAuth 2.1 Explained Simply (Even If You're Not a Dev)!
41mOAuth 2.1 Explained Simply (Even If You're Not a Dev)!
45mDemystifying OAuth2 and OIDC
19mOAuth and OpenID Connect in Plain English
58mOAuth – the good Parts
54mOAuth – the good Parts
29mDemystifying Oauth2 Authorization framework
42mOAuth2 and What Comes Next