The Journey Continues - What's New in OAuth 2.1?
summary
An overview of the planned OAuth 2.1 consolidation: it summarizes recent security findings and new RFCs/best-practices that have emerged since RFC 6749 (OAuth 2.0) and explains which protocol changes and implementation adjustments developers must make. The talk covers OAuth 2.0 basics plus the concrete new recommendations and requirements being collected into the OAuth 2.1 specification (as discussed in the IETF working group).
AI-written summary · about
chapters (6)
- 0:00Introduction
- 6:47OAuth 2.0 basics
- 16:00OAuth 2.1 updates
- 21:51Grant types in OAuth 2.1
- 30:06Token security best practices
- 37:13Q&A
related talks
40mOAuth 2.1 Explained Simply (Even If You're Not a Dev)!
25mOAuth 2.1: The Future of API Security
58mOAuth – the good Parts
29mFireside Chat About OAuth 2.0
46mA Deep Dive into the Past, Present & Future of OAuth
23mThe state of OAuth
01h 02mOAuth in 2021 – What’s up?
01h 02mOpenID Connect & OAuth 2.0 – Security Best Practices