Safeguard your precious API endpoints built on FastAPI using OAuth 2.0
summary
Claims that OAuth2 plus OpenID Connect makes FastAPI endpoints secure using concrete patterns and tools not platitudes: authorization code flow with PKCE, short 5‑minute access tokens, and token validation either locally (JWT + public keys) or remotely (introspect). Demo pairs a React SPA with a FastAPI resource server, uses FastAPI HTTPBearer and offlib to decode tokens, and authenticates via Octa and Ozero; the demo succeeds. Presenter cites startling numbers: >80% breaches are identity attacks, 1.9B sessions stolen, ~290 days to contain a breach.
AI-written summary · about
chapters (6)
- 0:00Securing FastAPI with OAuth
- 3:55OAuth 2.0 history
- 8:09OAuth 2.0 vs OpenID Connect
- 15:09FastAPI security features
- 17:17Live demo OAuth endpoints
- 23:55Best practices secure APIs
related talks
39mSecure your APIs using OAuth2 and OpenID Connect
27mThe Nuts and Bolts of API Security: Protecting Your Data at All Times
37mOAuth2 and OpenID Connect for Single Page Applications
18mSecure your Apps and APIs with strong authentication and Adaptive Access.
59mSecuring Web APIs from JavaScript/SPA Applications
28mGetting to know your users
02h 34mFundamentals of API security with Python
47mProtect your API with OAuth2