Service Oriented Authenication
summary
A concrete recipe for adding centralized auth to a monolith and then peeling off services: implement OAuth2 + doorkeeper + omniauth, build a tiny so_auth gem for consumers, and wire provider endpoints so consumers GET /oauth/me for JSON user info. The flow involves seven roundtrips in the simple case, uses a user cookie to enable single sign-off, and works with Devise and existing Rails apps so you can migrate incrementally.
AI-written summary · about
chapters (8)
- 0:00Start
- 0:39Service Oriented Authentication
- 11:31Demo
- 14:16Consumer Implementation - Part 1
- 18:36doorkeeper configuration
- 19:27OAuth application authorization Get rid of it!
- 29:07Single sign off (Provider side)
- 30:59Single Sign Off (Consumer side)
related talks
36mAdventures in Federating Authorization and Authentication with OAuth
39mAuthentication done right: consuming (and serving) Oauth2.0
57mSecurity and Identity: Ruby, CAS, and OpenID
44mThe Art of Authentication for Web Apps
18mMake Auth great again with Ory
24mUnraveling the black box: past, present and future of authentication in Rails
44mHow We Rewrote Authentication in a Microservices Platform
43mOAuth, IndieAuth, and the Future of Authorization APIs