KEYNOTE: Go with the Flow
summary
Builds a small Flask API, protects an endpoint with a decorator that validates JWTs, then converts the app into a web app using an OAuth client and session cookies so login, callback, and logout work end to end. Uses AuthO by Okta, Flask, and httpx for requests; demonstrates a machine-to-machine client credentials flow returning access tokens and a user-facing authorization code flow with PKCE returning access + ID tokens (ID token contains user info). Code runs and clarifies when to pick each flow.
AI-written summary · about
chapters (8)
- 0:00Introduction and speaker intro
- 2:36Identity protection basics
- 10:02Client credentials flow explained
- 14:36Turning API into web app
- 21:00Implementing login and logout
- 24:32Authorization code flow
- 28:05OAuth vs OpenID Connect
- 30:16Key takeaways and conclusion
related talks
20mIdentity providers, your app, and everything in-between
27mSafeguard your precious API endpoints built on FastAPI using OAuth 2.0
01h 00mOAuth – the good Parts
18mPapers Please! A Non-Dystopian Look at Modern Authentication
46mBuilding an OAuth Flow in a Node.js CLI
49mUnderstanding OAuth 2.0 & OIDC
46mAn illustrated crash course for OAuth and OIDC
37mOAuth2 and OpenID Connect for Single Page Applications