OAuth 2.0 and OpenID Connect (in plain English)

推荐理由

it was a requirement for new joiners to watch this in their first week

强烈推荐willsmith72 · 原文2024年4月

说明

这是2018年由OktaDev发布的一部演讲，主题归在Security & hacking。它讲的是oauth and openid connect这一支里的具体问题，而不是把整个领域扫一遍。适合第一次接触、还没有先修课的人。内容上可以概括成：Okta developer advocate Nate Barbettini explains OAuth 2.0 and OpenID Connect in a roughly hour-long talk. It starts from the problems the protocols solve and walks through the flows. The description notes the implicit flow material is now out of date.这些读者给出的理由，核心是：HN repeatedly points people to it as the clearest way to finally understand OAuth, to the point that one team made it required viewing for new hires.它贴着当时的技术，看的时候要记得那是那个年份的判断。从2019年到2026年，有7位不同的读者在6个不同月份把它推荐出来，其中明确叫别人去看的有3次。适合一次性看完。讲者把一个判断讲透，演示是在给这个判断配例子。如果已经会了基本定义，就把注意力放在它怎么把oauth and openid connect变成能跟着复述的例子。

视频信息

频道

OktaDev

时长

1 小时 2 分

发布年份

2018

同主题更多

• Behind the Scenes of iOS Security
• Why Electronic Voting Is Still A Bad Idea
• USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
• Defcon 18 Changing threats to privacy Moxie Marlinspike Part
• 28c3: The Science of Insecurity
• DEF CON 25 - John Sotos - Genetic Diseases to Guide Digital Hacks of the Human Genome