Главная
Study mode:
on
1
Intro
2
Objectives
3
It's complicated!
4
The Big Picture
5
Client Credentials Flow
6
Use Token
7
Challenges for Clients
8
Front-Channel: Authorization Code Flow Request
9
Front-Channel: Authorization Code Flow Response
10
Back-Channel: Retrieving Tokens
11
Issues with Code Flow
12
Hybrid Flow Request
13
Hybrid Flow Response
14
Issues with Hybrid Flow
15
Public Clients
16
Native/Mobile Applications
17
Anti Pattern: Resource Owner Password Flow
18
Using a browser for driving the authentication workflow
19
Client Libraries
20
Browser-based Clients (aka SPAS)
21
History (2)
22
Implicit Flow Request
23
Problems with Implicit Flow
24
Token Management for JS Apps
25
Java Script Client Library
26
The new kid on the block: Same Site Cookies
27
"BFF" Architecture
28
Further Reading
Description:
Explore best practices for building clients that utilize OpenID Connect and OAuth 2 protocols in this comprehensive conference talk. Dive into the complexities of authentication and API access, learning how to simplify front-end development while addressing challenges such as selecting appropriate protocol flows, secure token storage, and token lifetime management. Gain insights on implementing solutions for native server applications, client-side applications, browser-based applications, and Single Page Applications (SPAs). Discover the intricacies of various flows including Client Credentials, Authorization Code, Hybrid, and Implicit, as well as their potential issues. Examine anti-patterns, explore the use of client libraries, and understand the implications of Same Site Cookies and "Backend for Frontend" (BFF) architecture. Leave equipped with knowledge to make informed decisions when building secure and efficient clients for OpenID Connect and OAuth 2-based systems.

Building Clients for OpenID Connect - OAuth 2-based Systems

NDC Conferences
Add to list