sakisvon Hacker News • Recommends
On “Everything you need to know about OAuth 2.0”
This also has a very nice and simple explanation of the whole thing: link to this video It's about 1h long, but it's really worth it.
0:00 / 0:00
#oauth2.0#openidconnect#authentication
OAuth 2.0 and OpenID Connect (in plain English)
OktaDev
67K subscribers • 2 videos on Hallway
- Recommended by 7 people: 7 on Hacker News.
- A classic. People kept recommending it from 2019 to 2026.
- Presented by Nate Barbettini, Developer Advocate
- Linked in the descriptionSlides on Speaker Deck
- Made by the vendor. The company whose product it covers made or sponsored it.
- May be out of date. The tools, versions or practices it shows have likely moved on.
Beginner. No background in the topic needed.
2M views8 years ago7 recommendations
SecurityWeb developmentCryptographyHTTP, REST and GraphQLWeb and application security
Nate Barbettini explains the core concepts, flows, and differences between OAuth 2.0 and OpenID Connect starting from the problems they solve.
Developer Advocate Nate Barbettini breaks down OpenID and OAuth 2.0 in Plain English. NOTE: This video is from 2018 and contains some information that is now out of date, mainly the content around the OAuth Implicit Flow. Check out the video course! The Nuts and Bolts of OAuth 2.0 oauth2simplified.com/course Learn more about OAuth at oauth.net Get the book: OAuth 2.0 Simplified amzn.to/36HAGoS Find Nate's slides here: speakerdeck.com/nbarbettini/oauth-and-openid-connect-in-plai…Why it's here
7 people recommend thisWhat people say. Highly recommended as one of the clearest, most comprehensive introductions to OAuth and OpenID Connect for beginners.
Moments people linked to
butisaidsudoon Hacker News • Recommends
On “Why is OAuth still hard in 2023?”
I read so many docs when I was trying to implement OAuth and got more and more confused. This video was a huge help though for explaining all of the concepts: link to this video
willsmith72on Hacker News • Recommends
On “Learn OAuth by building a client with Node.js”
at my old company we worked with auth a lot, so it was a requirement for new joiners to watch this in their first week. i still recommend it if you want to learn oauth from 0 link to this video
manigandhamon Hacker News • Recommends
On “An Illustrated Guide to OAuth and OpenID Connect”
…he user info) and Access tokens (for accessing an API on behalf of that user), but some services like social logins don't provide any access tokens. Other providers might have rate limits, or dont have fine-grained permissions, or you maybe you have completely internal APIs that you need tokens for. Also this video is a great in-depth walkthrough: link to this video…
kranticon Hacker News • Recommends
On “Ask HN: Any comprehensive courses on Auth?”
I have not seen a course that covers all of the things you are asking for. The best courses on the oidc/oauth and saml I have seen were the paid ones here: link On linkedinlearning this one was quite ok: link Free ressources check: - link -OAuth 2.0 and OpenID Connect (in plain English): link to this video link -OAuth/OpenID by Nat Sakimura(chairman openid foundation) link For the active directory topic I don't know good ressources
languron Hacker News • Recommends
On “Ask HN: Any comprehensive courses on Auth?”
I found Nate Barbettini's video on OAuth and OpenID Connect incredibly insightful for understanding these topics. He explains everything so well- link to this video . Additionally, I'm part of the ZITADEL team, an open-source project that's free to download or use in our cloud offering. So, you can always tinker around with it as some others have already suggested. Our blog dives into various security topics, ranging from OAuth, OpenID Connect, and Single Sign-On, Authentication, Federation to emerging issues like Passkeys. We also discuss real-world Identity Management problems and solutions seen by ZITADEL users— link . For any specific security-related queries, feel free to join the conversation o…
scandoxon Hacker News • Recommends
On “What Is OAuth?”
link to this video A classic explainer from almost a decade ago. This explains it from the point of view of the original problem it was designed to solve.
Michael Ron Stack Overflow • Mentions
On “Facebook OAuth 2.0 "code" and "token"”
…thus cannot be intercepted/grabbed from a browser. We trust the web server more, which communicates via back channels. The access token, which is secret, can then remain on the web server, and not be exposed to the browser (i.e. front channels).
For more information, watch this fantastic video:
OAuth 2.0 and OpenID Connect (in plain English)
link to this video (Start 26 mins)…