Introduction to OAuth 2

The Introduction to OAuth 2 training course teaches developers all aspects of OAuth 2. OAuth 2 is a security protocol used across the web to protect Application Programming Interfaces (APIs) and enable applications to interact securely with services. In this two-day class developers will get a thorough overview of the OAuth 2 protocol, how it works, and why it works the way that it does.

The first day focuses on the OAuth 2 protocol itself and includes a hands-on laboratory where developers will build a complete OAuth ecosystem from scratch, including the client, authorization server, and protected resource. Next the course will cover the variety of OAuth flows and how to choose between them. The second day focuses on the protocols and world around OAuth, including OpenID Connect for identity, token management with revocation and introspection, token formats using JavaScript Object Notation (JSON) Web Token (JWT) and Javascript Object Signing and Encryption (JOSE), dynamic client registration, server discovery, user-managed access, and proof of possession tokens. This day’s labs concludes with a hands-on JWT creation and parsing as well as implementation of OpenID Connect on top of the OAuth 2 system from the previous day.