In this two-part workshop series, you'll learn best practices for implementing OAuth in web apps, native apps, and single-page apps. You'll learn how to implement OAuth securely, both when writing an app as well as building an API. You'll also learn how OpenID Connect builds on top of OAuth 2.0 to provide the identity of users signing in. We'll work through some live coding examples to demonstrate the common OAuth patterns we discuss. Lastly, you'll learn the pros and cons of various options for choosing token lifetimes when building an API.
Part 1 focuses on a high-level introduction to OAuth and OpenID Connect, talking about the background of why OAuth is important, and detailing use cases for each OAuth flow.
Part 2 goes into a deep dive on building a secure OAuth client from scratch. Live coding examples will illustrate how to get an access token to access APIs and how to learn the user’s name and email using OpenID Connect. We’ll also build a functioning API that validates access tokens and returns private data. We’ll conclude with a discussion of the various options for access token lifetime and different ways to validate access tokens, talking about the tradeoffs of each.
By the end of the session, you’ll be able to authenticate users and protect APIs using OAuth and OpenID Connect.
Feel free to register for one or both, depending on your needs! We look forward to seeing you!
Okta is the foundation for secure connections between people and technology. By harnessing the power of the cloud, Okta allows people to access applications on any device at any time, while still enforcing strong security policies. It integrates directly with an organization’s existing directories and identity systems, as well as 4,000+ applications.
Because Okta runs on an integrated platform, organizations can implement the service quickly at large scale and low total cost.
More than 2,000 customers, including Adobe, Allergan, Chiquita, LinkedIn, MGM Resorts International and Western Union, trust Okta to help their organizations work faster, boost revenue and stay secure.
