Login and Access Control in Angular

on YouTube ↗39m

" summary

Concrete, actionable material: Angular app uses JWTs via implicit flow, configures an angular-oauth2-oidc style module, validates signatures and nonces, and sends access tokens as HTTP Authorization: Bearer using an HTTP interceptor. Demo uses identityserver on Azure, prints and decodes tokens, reads identity claims, uses a canActivate guard, refreshes tokens before expiry, and implements single sign-out via iframe/Server-Sent-Events/WebSocket that actually logs out both browser tabs.

AI-written summary · about

" chapters (11)

1. 0:00Intro
2. 1:30Motivation
3. 2:01Requirements
4. 9:17Existing authorization services
5. 12:03Implicit Flow
6. 19:57Demo
7. 24:25Booking a flight
8. 25:42Implementation
9. 28:55HTTP Interceptor
10. 29:55HTTP Interceptor Implementation
11. 34:25Single SignOn

" related talks

• 33mMake your Angular app a max security prisonMatias Woloski, Martin Gontovnikas · ng-europe 2014
• 19mAngular's User Authentication Tool BeltKim Maida, Ryan Chenkie · ngAtlanta Conf 2018
• 31mAuthentication with OpenID Connect in Angular ApplicationsPhilippe De Ryck · NG-BE 2019
• 54mOpenID Connect In DepthKevin Dockx · .NET Fest 2019
• 26mThe Science of Authenticating Angular AppsKim Maida · AngularUP 2019
• 30mEnable Authentication and Authorization with Azure Active DirectoryYawei Wang · SpringOne Platform 2017
• 39mSecuring your apps with OAuth2 and OpenID ConnectRoland Guijt · Codemotion Rome 2015
• 26mAngular Router Authentication and Authorization Real LIVE LIVE LIVE LIVE LIVE DemoShai Reznik · ng-conf 2017