OAuth and OpenID Connect in Plain English

on YouTube ↗19m

" summary

Explains how OAuth 2.0 solves delegated authorization by redirecting users to an authorization server, returning an authorization code which the client exchanges for an access token, and how scopes limit access; documents the security rationale for the extra code exchange and why people misapply OAuth for authentication. Describes OpenID Connect as a thin OpenID Connect layer on OAuth 2.0 that standardizes identity claims and replaces ad‑hoc provider hacks; cites Google/Facebook adoption and notes deeper material is available.

AI-written summary · about

" chapters (8)

1. 0:00Intro
2. 2:07Why do OAuth protocols exists?/the delegated authorization problem
3. 4:53Delegated authorization with OAuth 2.0
4. 7:49The OAuth flow terminology
5. 13:32What happened after OAuth?
6. 15:01New problem in OAuth
7. 16:27OAuth 2.0 and Open ID Connect
8. 17:33Current practice

" related talks

• 47mIntroduction to OAuth 2.0 and OpenID ConnectPhilippe De Ryck · GOTO Berlin 2018
• 33mOAuth and OpenID Connect Deep DiveTravis Spencer · Nordic APIs Stockholm 2013
• 28mOAuth 2.0 and OIDCSara Daqiq · Silicon Valley Code Camp 2018
• 45mDemystifying OAuth2 and OIDCNejmeddine Ben Ouarred · DevFest Toulouse 2025
• 31mOAuth 2.1 And OpenID ConnectAbdessamad Temmar · BlaBlaConf 2022
• 45mMastering OAuth 2.0 and OpenID ConnectLeonardo Micheloni · Codemotion Madrid 2025
• 24mIntroduction to OpenID ConnectKarim Pinchon · Forum PHP 2020
• 52mOAuth Demystified!Sebastien Stormacq · Voxxed Days Luxembourg 2022