Why you shouldn´t care about Security
summary
Shows how outsourcing authentication to an identity provider like Auth0 removes password storage and sync headaches, replacing them with OAuth/OpenID Connect flows that return JSON Web Token access and ID tokens. Demo uses PHP (composer, auth0-php), creates a client and API, changes the audience, obtains an authorization code, exchanges it for a JWT, and verifies it with jwt.io and Postman against an API on port 3001. Result: minimal glue code and reclaimed engineering time (≈22 staff).
AI-written summary · about
chapters (15)
- 0:00Intro
- 0:32About me
- 2:18The problem
- 2:50The problem organically
- 5:23The solution
- 13:54Code
- 20:54Profile
- 27:04Authentication
- 27:16Token
- 27:36ID Token
- 27:56JSON Token
- 28:29Postman
- 28:44Access Token
- 29:14Verify Token
- 30:02Integration with Laravel
related talks
47mProtect your API with OAuth2
01h 02mModern Authentication
49mUnderstanding OAuth 2.0 & OIDC
22mKnock knock, who's there? Authenticating your single page apps using JSON Web Tokens
36mTo Identity and Beyond
01h 12mIdentity 2.0: the what, why and how of social and federated login
28mGetting to know your users
29mTackling Authentication with Phoenix