OAuth: What it is, how it works and why you want to use it
-
Register
- Member - Free!
OAuth is a critical security framework for modern web and mobile applications, enabling secure access to resources without sharing user credentials. We will start with the history, foundational concepts and terminology of OAuth. We then describe the different types of OAuth clients and the appropriate authorization flows, grant types, and scopes. We will explore the different types of tokens, explain JWTs, and introduce OpenID Connect. Whether you're a developer, security professional, or someone looking to understand OAuth in more depth, this session will provide a solid introduction to one of the most essential standards in the world of secure authentication and authorization.
Learning Objectives:
1. The need/history of OAuth
2. Terminology
3. Client types
4. Authorization flows
5. Tokens
Patrick Behr
Patrick Behr has been working on IBM i and its predecessors for 20 years, with a focus on RPG and DB2. Patrick has worked for large retail companies like Costco and Starbucks, manufacturing companies, small businesses and the government.
Patrick lives with his wife in Southern California and enjoys the many outdoor activities that the area affords, including kayaking, rock climbing and surfing. He and his wife also volunteer for local animal rescues and have fostered more than 700 dogs so far.