OAuth 2.1 Explained Simply (Even If You're Not a Dev)!
summary
A clear, non-technical explanation of OAuth 2.1: what authorization delegation is, the roles involved (clients, resource owners, authorization servers, resource servers), and why multiple flows exist. The talk uses everyday-life analogies to walk through OAuth concepts and the changes in the new 2.1 specification so listeners without a developer background can understand how OAuth works and why it’s used to protect web applications.
AI-written summary · about
chapters (10)
- 0:00OAuth 2.1 welcome
- 3:49Revocable authentication
- 8:01Temporary code auth
- 10:50Password sharing risks
- 13:17Authentication parties
- 17:13Front-channel interception
- 21:06In-hand delivery
- 28:51Broken implicit flow
- 36:25PKCE for security
- 39:18OAuth 2.1 best practices
related talks
40mOAuth 2.1 Explained Simply (Even If You're Not a Dev)!
47mOAUTH 2.1 Explained Simply (even if you’re not a dev)
19mOAuth and OpenID Connect in Plain English
45mDemystifying OAuth2 and OIDC
47mIntroduction to OAuth 2.0 and OpenID Connect
58mOAuth – the good Parts
54mOAuth – the good Parts
25mOAuth 2.1: The Future of API Security