Explain it to Me Like I’m 5: Oauth2 and OpenID

on YouTube ↗48m

" summary

Explains concrete OAuth2/OpenID Connect elements: access, refresh and id tokens; scopes and their intersection; grant types including client credentials, authorization code with PKCE, device code, and why implicit/password are deprecated; examples like device-code logins for TV devices. Shows Spring Security built-in support (5.2+), required starters, config keys (client-id, client-secret, issuer-uri) and resource-server setup using resource-server JWT JWK URI. Gives debugging steps: enable Spring Security debug logging and watch browser network redirects.

AI-written summary · about

" chapters (11)

1. 0:00Introduction
2. 1:09When to use OAuth2 and OpenID
3. 7:27Authentication vs Authorization
4. 9:54OAuth2 key concepts
5. 12:45Tokens and scopes
6. 19:25Grant types explained
7. 25:49Authorization code flow
8. 30:28OpenID Connect basics
9. 34:17Spring Security setup
10. 44:07Debugging tips
11. 45:10Why use OAuth2 and OpenID

" related talks

• 47mIntroduction to OAuth 2.0 and OpenID ConnectPhilippe De Ryck · GOTO Berlin 2018
• 33mOAuth and OpenID Connect Deep DiveTravis Spencer · Nordic APIs Stockholm 2013
• 28mOAuth 2.0 and OIDCSara Daqiq · Silicon Valley Code Camp 2018
• 45mDemystifying OAuth2 and OIDCNejmeddine Ben Ouarred · DevFest Toulouse 2025
• 19mOAuth and OpenID Connect in Plain EnglishNate Barbettini · GOTO Chicago 2020
• 31mOAuth 2.1 And OpenID ConnectAbdessamad Temmar · BlaBlaConf 2022
• 51mSecuring applications with OAuth2 and OpenID Connect using SpringSecuritThomas Vitale · Devoxx Ukraine 2021
• 49mSpring Security 5: Demystifying Cloud IdentityIngo Düppe · JCON 2020