Get in Touch

Course Outline

Introduction

  • Overview of OAuth.
  • Understanding API security.

OAuth

  • Protocol endpoints.
  • Scope.
  • Authorization code for web applications.
  • Implicit flow for single-page applications.
  • Client credentials for machines.
  • Resource owner password credentials.
  • Long-lived access with refresh tokens.
  • Choosing the appropriate response mode.
  • Simplifying OAuth with OAuth 2.1.

Native Applications Best Practices

  • Unique issues of native applications.
  • Using PKCE to handle stolen tokens.
  • Choosing the best redirect URI.

Browser-based Application Best Practices

  • The security profile of browser-based applications.
  • OAuth within the browser.
  • Avoiding OAuth with SameSite cookies.
  • Securing browser-based applications with backend for frontend.

Extending OAuth

  • OAuth and Identity with OpenID Connect.
  • Configuring clients with OAuth metadata.
  • Authorizing the Internet of Things (IoT) with the OAuth device flow.
  • Combining SAML and OAuth with the SAML assertion grant.
  • Securing Microservices with token exchange.

Summary and Next Steps

Requirements

  • Basic knowledge of web service and API development.

Audience

  • Developers.
 7 Hours

Number of participants


Price per participant

Testimonials (4)

Upcoming Courses

Related Categories