OpenID Connect and OAuth2.0

on YouTube ↗01h 03m

" summary

Covers OAuth 2.0 and OpenID Connect, specifically three specs used to build an SSO client for Next.js. Explains common problems and encryption considerations for storing user data in sessions on both backend and frontend, and how to handle authorized access from diverse devices.

AI-written summary · about

" chapters (12)

1. 0:00Introduction
2. 3:02OAuth2.0 security issues
3. 8:52JWT anatomy
4. 13:33Session storage mistakes
5. 21:09Auth vs auth standards
6. 23:58OpenID Connect mechanism
7. 29:14Choosing flows: Implicit, Auth Code, Hybrid
8. 37:25PKCE security
9. 41:04Session sync with OpenID Connect
10. 48:38Server-side session storage
11. 51:32Security summary
12. 53:19Q&A

" related talks

• 45mMastering OAuth 2.0 and OpenID ConnectLeonardo Micheloni · Codemotion Madrid 2025
• 28mOAuth 2.0 and OIDCSara Daqiq · Silicon Valley Code Camp 2018
• 01h 00mImplementing OpenID Connect and OAuth 2.0 – Tips from the TrenchesDominick Baier · NDC Security Oslo 2020
• 01h 01mBuilding Clients for OpenID Connect/OAuth 2-based SystemsDominick Baier · NDC Copenhagen 2019
• 47mIntroduction to OAuth 2.0 and OpenID ConnectPhilippe De Ryck · GOTO Berlin 2018
• 01h 02mOpenID Connect & OAuth 2.0 – Security Best PracticesDominick Baier · NDC Oslo 2020
• 57mBuilding Clients for OpenID Connect/OAuth 2-based SystemsDominick Baier, Brock Allen · NDC Porto 2019
• 33mOAuth and OpenID Connect Deep DiveTravis Spencer · Nordic APIs Stockholm 2013