Authentication, Authorization, and You...

on YouTube ↗52m

" summary

How to build secure, user-friendly Android apps using modern authentication and authorization technologies: Firebase Authentication, SMS Retriever, Smart Lock, OpenID Connect/OAuth2.0, and FIDO. Covers when to use authentication vs. authorization for API-based data sharing (e.g., fintech scenarios) and practical implementation details and pitfalls for applying these standards and Google APIs on Android.

AI-written summary · about

" chapters (14)

1. 0:00Authentication basics
2. 3:48Why auth matters
3. 6:01OAuth 2.0 Android
4. 17:49OAuth 2.0 issues
5. 22:30RFC 8252 OAuth 2.0
6. 25:19Web view alternatives
7. 29:42FIDO authentication
8. 33:28FIDO benefits
9. 35:45FIDO flow Android
10. 40:38Securing FIDO keys
11. 43:35Hardware keystores
12. 46:31Key registration
13. 50:15Limitations & future
14. 51:01Summary

" related talks

• 37mBuilding simple and secure account systems on AndroidSteven Soneff · droidcon Berlin 2016
• 53mA More Secure World for Android AppsMercedes Wyss · Greach 2019
• 46mA More Secure World for Android AppsMercedes Wyss · droidcon San Francisco 2018
• 36mOAuth Done Right: Secure Authentication for Androi…Chrystian Vieyra Cortes · DroidKaigi 2025
• 26mPasswordless Future!!Ayushi Gupta · droidcon London 2024
• 42mA MORE SECURE WORLD FOR ANDROID APPSMercedes Wyss · droidcon Berlin 2018
• 38mThe Present and Future of Standardized Authentication Specifications You Can Experience on Android/Chromeritou · DroidKaigi 2022
• 40mThree New Ways to Secure Your App with Firebase AuthenticationYing Hao, Marc Jordan · Google I/O 2019