OpenID Connect In Depth

on YouTube ↗54m

" summary

Shows Single Sign-On between Angular and ASP.NET Core MVC and implements automated single sign‑out using IdentityServer4 with both front‑channel and back‑channel approaches, proves reference tokens (stored in the DB) let immediate revocation while JWTs avoid IDP roundtrips, and exercises the revocation endpoint and persisted grants. Builds a custom grant implementing the token‑exchange standard so API1 obtains an access token for API2 that preserves the original user sub; demos run end‑to‑end and succeed.

AI-written summary · about

" chapters (7)

1. 0:00Intro
2. 1:40COMING UP
3. 3:48SINGLE SIGN-ON
4. 15:43SINGLE SIGN-OUT (SERVER, FRONT CHANNEL)
5. 17:34SINGLE SIGN-OUT (USER AGENT, FRONT CHANNEL)
6. 27:33SELF-CONTAINED VS REFERENCE TOKENS
7. 40:29API TO API ACCESS ON BEHALF OF THE USER

" related talks

• 51mAuthentication and Authorization in ASP.NET Core 2Roland Guijt · Update Conference Prague 2018
• 01h 03mIdentity Server 4 with Angular and ASP.NET CoreBen Cull · NDC Oslo 2017
• 31mAuthentication with OpenID Connect in Angular ApplicationsPhilippe De Ryck · NG-BE 2019
• 14mIntroduction to Using OpenID Connect on ASP.NET CoreAndrii Chebukin · .NET fwdays'18
• 59mThe whirlwind tour of Authentication and Authorization with ASP.NET CoreChris Klug · NDC Minnesota 2018
• 57mBuilding Clients for OpenID Connect/OAuth 2-based SystemsDominick Baier, Brock Allen · NDC Porto 2019
• 58mLet's talk AuthJordan Knight · NDC Sydney 2016
• 39mSecuring your apps with OAuth2 and OpenID ConnectRoland Guijt · Codemotion Rome 2015