Get in Touch

Course Outline

Introduction

  • Overview of OAuth.
  • Understanding API security.

OAuth

  • Protocol endpoints.
  • Scope.
  • Authorization code for web applications.
  • Implicit flow for single-page applications.
  • Client credentials for machine-to-machine communication.
  • Resource owner password credentials.
  • Extended access via refresh tokens.
  • Selecting the appropriate response mode.
  • Simplifying OAuth with OAuth 2.1.

Best Practices for Native Applications

  • Distinct challenges of native apps.
  • Utilizing PKCE to mitigate token theft.
  • Selecting the optimal redirect URI.

Best Practices for Browser-Based Applications

  • Security profile of browser-based applications.
  • Implementing OAuth within the browser.
  • Preventing OAuth vulnerabilities with SameSite cookies.
  • Enhancing security for browser-based apps using 'backend-for-frontend' architecture.

Extending OAuth

  • OAuth and Identity Management with OpenID Connect.
  • Configuring clients using OAuth metadata.
  • Authorizing IoT devices via the OAuth device flow.
  • Integrating SAML and OAuth with the SAML assertion grant.
  • Securing Microservices through token exchange.

Summary and Next Steps

Requirements

  • Fundamental knowledge of web service and API development.

Target Audience

  • Developers.
 7 Hours

Number of participants


Price per participant

Testimonials (4)

Upcoming Courses

Related Categories