Course Outline

Introduction

  • Overview of OAuth
  • Understanding API security

OAuth

  • Protocol endpoints
  • Scope
  • Authorization code for web apps
  • Implicit flow for single-page apps
  • Client credentials for machines
  • Resource owner password credentials
  • Long-lived access with refresh tokens
  • Choosing the right response mode
  • Simplifying OAuth with OAuth 2.1

Native Applications Best Practices

  • Unique issues of native apps
  • Using PKCE to handle stolen tokens
  • Choosing the best redirect URI

Browser-based Application Best Practices

  • The security profile of the browser-based app
  • OAuth within the browser
  • Avoiding OAuth with SameSite cookies
  • Securing browser-based apps with backend for frontend

Extending OAuth

  • OAuth and Identity with OpenID Connect
  • Configuring clients with OAuth metadata
  • Authorizing the IoT with the OAuth device flow
  • Combining SAML and OAuth with the SAML assertion grant
  • Securing Microservices with token exchange

Summary and Next Steps

Requirements

  • Basic knowledge of web service and API development

Audience

  • Developers
 7 Hours

Delivery Options

Private Group Training

Our identity is rooted in delivering exactly what our clients need.

  • Pre-course call with your trainer
  • Customisation of the learning experience to achieve your goals -
    • Bespoke outlines
    • Practical hands-on exercises containing data / scenarios recognisable to the learners
  • Training scheduled on a date of your choice
  • Delivered online, onsite/classroom or hybrid by experts sharing real world experience

Private Group Prices RRP from €2280 online delivery, based on a group of 2 delegates, €720 per additional delegate (excludes any certification / exam costs). We recommend a maximum group size of 12 for most learning events.

Contact us for an exact quote and to hear our latest promotions


Public Training

Please see our public courses

Testimonials (5)

Provisional Upcoming Courses (Contact Us For More Information)

Related Categories