Introduction to OAuth 2 Course | DevelopIntelligence

Course Summary

The Introduction to OAuth 2 training course teaches developers all aspects of OAuth 2. OAuth 2 is a security protocol used across the web to protect Application Programming Interfaces (APIs) and enable applications to interact securely with services. In this two-day class developers will get a thorough overview of the OAuth 2 protocol, how it works, and why it works the way that it does.

The first day focuses on the OAuth 2 protocol itself and includes a hands-on laboratory where developers will build a complete OAuth ecosystem from scratch, including the client, authorization server, and protected resource. Next the course will cover the variety of OAuth flows and how to choose between them. The second day focuses on the protocols and world around OAuth, including OpenID Connect for identity, token management with revocation and introspection, token formats using JavaScript Object Notation (JSON) Web Token (JWT) and Javascript Object Signing and Encryption (JOSE), dynamic client registration, server discovery, user-managed access, and proof of possession tokens. This day’s labs concludes with a hands-on JWT creation and parsing as well as implementation of OpenID Connect on top of the OAuth 2 system from the previous day.

Purpose

Learn how to build advanced web security with OAuth.

Audience

Developers of protected APIs or clients of those APIs, security architects.

Role

Business Analyst - Software Developer - System Administrator - Technical Manager - Web Developer

Skill Level

Intermediate

Style

Hack-a-thon - Learning Spikes - Workshops

Duration

2 Days

Related Technologies

Security

Web Development

Download

Productivity Objectives:

Examine OAuth 2 protocol flows.
Interpret a deep understanding of the authorization code flow.
Determine when to use which OAuth flow.
Identify what OAuth doesn’t cover.
Deduce how OpenID Connect is built on top of OAuth.
Illustrate a familiarity with advanced topics including introspection, revocation, registration, discovery, User Managed Access (UMA), and Post Office Protocol (PoP).

Learn About Virtual Training

Request Information

Get your team upskilled or reskilled today. Chat with one of our experts to create a custom training proposal. Fully customized at no additional cost.

If you are not completely satisfied with your training class, we'll give you your money back.

about our training

Real-World Content

Project-focused demos and labs using your tool stack and environment, not some canned "training room" lab.
Expert Practitioners

Industry experts with 15+ years of industry experience that bring their battle scars into the classroom.
Experiential Learning

More coding than lecture, coupled with architectural and design discussions.
Fully Customized

One-size-fits-all doesn't apply to training teams. That's where we come in!

What You'll Learn

In the Introduction to OAuth 2 training course, you'll learn:

What is OAuth 20
How did we solve API access without OAuth
How OAuth protects APIs
A history of OAuth
What OAuth isn’t
The authorization code flow
Building an OAuth ecosystem (lab)
Refresh tokens
Scopes
OAuth flows
- Implicit
- Client cridentials
- Password
- Assertion
Native clients
- PKCE
Choosing different OAuth flows
JSON Web Tokens (JWT)
- JOSE
Making JWTs (lab)
User authentication
- What is Authentication?
- Can we build Authentication with OAuth?
OpenID Connect
- ID Tokens
- UserInfo
Adding OpenID Connect to OAuth (lab)
Discovery
Dynamic registration
Token introspection
Token revocation
User-managed Access
Proof of Possession