Building Clients for OpenID Connect - OAuth 2-based Systems
Explore best practices for building clients using OpenID Connect and OAuth 2 protocols in this comprehensive 57-minute conference talk. Delve into the complexities of authentication and API access, learning how to simplify front-end development while addressing challenges such as selecting appropriate protocol flows, secure token storage, and token lifetime management. Gain insights into implementing client credentials flow, authorization code flow, and hybrid flow for various client types, including native, server-side, client-side, and browser-based applications. Discover the pros and cons of different approaches, understand anti-patterns to avoid, and learn about modern solutions like AppAuth and the "BFF" architecture. Master token management techniques for JavaScript applications and stay up-to-date with the latest developments in browser security, such as SameSite cookies.