Skip to content
Hallway
0:00 / 0:00

#oauth#oauth2.1#openidconnect

OAuth in 2021 – What’s up? - Dominick Baier - NDC London 2021

NDC Conferences

230K subscribers • 110 videos on Hallway • Conference channel

YouTube
  • Recommended by 1 person: 1 in engineering communities.
  • Presented by Dominick Baier, co-creator of IdentityServer

Intermediate. Assumes working knowledge.

2.1K views5 years ago1 recommendation

SecurityWeb developmentWeb and application securityAPI design

Dominick Baier explains the latest specifications in the OAuth family, including OAuth 2.1, key rotation, and proof of possession tokens.

OAuth is the standard protocol for securing APIs and user authentication (when you layer OpenID Connect on top). But OAuth is not just a single protocol – it’s a family of specifications – and new ones get added as we speak. This talk looks at the latest revision of OAuth called OAuth 2.1, and picks out a couple of useful additional specification that help you improve the security of your token-based systems. Expect information on key rotation, the JWT profile, resource indicators, JAR & PAR and proof of possession access tokens.

Why it's here

1 person recommends this

What people say. Recommended for understanding modern OAuth specifications and security practices beyond basic implementations.

u/broken-neuronsin r/dotnet • Recommends

On “Why is authentication such a sh*t show with .NET 6?”

There were a couple of security focused developers in the .NET space that saw ASP.NET Membership stagnating away and a lack of support for more modern protocols, still using things like SHA for hashing passwords. They were core contributors to the open source application StartSTS / Identity Server created to address the shortcomings in the ASP.NET identity / IAM space and more specifically OpenId and then later OIDC and OAuth. Dominick Baier worked at the German based company Thinktecture with cofounder Christian Weyer and Ingo Rammer all Microsoft MVPs. With Brock Allen, Dominick started the open source project StarterSTS, which became the popular open source platform Identity Server 4 an…
27View on Reddit