From Basic Auth to OAuth: Migrating security
summary
The talk explains migrating web API authentication from older methods (basic auth, sessions/cookies) to modern approaches (OAuth, mutual TLS, short-lived tokens, certificate-based trust). It focuses on practical techniques using Spring Security to perform a soft migration that avoids breaking existing clients rather than doing a big-bang rewrite.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 1:05Security is getting more important
- 3:03The Monolith: Well known and straightforward ...
- 4:12Microservices cut right...
- 5:26Monolithic Auth Flow
- 6:38Auth Flow: The Microservice Way
- 11:14Microservices: Designed for Failure
- 14:15Service - Service Communication
- 16:07mTLS - mutual TLS
- 27:26User-Service Communication
- 28:50JSON Web Token - JWT
- 37:33Don't just Copy + Paste
related talks
44mThe Art of Authentication for Web Apps
45mModern API Authentication 101
01h 02mOpenID Connect & OAuth 2.0 – Security Best Practices
46mA Deep Dive into the Past, Present & Future of OAuth
01h 31mSecurity for Microservices with Spring and OAuth2
58mOAuth – the good Parts
01h 02mOAuth in 2021 – What’s up?
15mEvolution of UAA Towards OAuth 2.1 and OpenID Foundation