Application Security with OAuth 2 0 and OpenID Connect

Application Security with OAuth 2.0 and OpenID Connect
Published 10/2024
Duration: 4h15m | .MP4 1280×720, 30 fps(r) | AAC, 44100 Hz, 2ch | 2.07 GB

Learn OAuth 2/OpenID Connect, using Auth0, Postman. Use PKCE and prevent Authorization Code Injection with real example.

What you’ll learn
Understand OAuth 2.0 roles and the differences between authentication and authorization frameworks
Gain insights into advanced security topics like Authorization Code Injection and PKCE (Proof Key for Code Exchange)
Understand OIDC, the differences between access and ID tokens, and token types like JWT and opaque tokens
Apply best practices for using scopes, enhancing security, and selecting appropriate flows for different applications

Requirements
A basic understanding of web technologies and HTTP protocols
No advanced security knowledge is necessary, but having a basic understanding of APIs will be helpful.

Description
Who should take this course?
Developers who are integrating OAuth 2.0 and OpenID Connect into their applications and need to understand both theory and practice.
IT professionals seeking to enhance their knowledge of securing API endpoints and authentication mechanisms.
Cybersecurity students or professionals wanting to learn about modern authentication techniques and security vulnerabilities.
Beginners with no prior experience in OAuth 2.0 or OpenID who want a structured and comprehensive introduction to these technologies.
What practical skills will I gain?
You’ll take on the role of an attacker to simulate logging in as a regular user, while also learning how to prevent attackers from accessing user profiles and obtaining protected user data.
You’ll learn how to configure different OAuth 2.0 flows, including the Authorization Code Flow, Implicit Flow, Client Credentials Flow, and more.
The course provides a deep dive into understanding and using tokens (access tokens, ID tokens, and refresh tokens).
You’ll understand how to secure your applications by implementing PKCE (Proof Key for Code Exchange).
What does this course offer for you?
In-Depth Video Lessons:
Engage with clear, informative video content that breaks down complex concepts into easily digestible segments.
Practical Learning:
Go beyond theory! Practice all OAuth 2.0 flows through hands-on assignments that reinforce your understanding and skills.
Expert Insights on Security Vulnerabilities:
Learn about critical threats like Authorization Code Injection. The lesson explains how this attack works and guides you through preventive measures, ensuring you’re well-prepared to safeguard applications.
Understanding Tokens:
Hands-On Practice:
Who this course is for:
Developers looking to implement secure authentication and authorization in their applications using OAuth 2.0
API developers and architects who want to deepen their knowledge of secure token handling, authentication flows, and best practices.
Anyone interested in understanding modern application security with a focus on OAuth 2.0 and related standards.

More Info