Introducing the Identity Guardians - Auth tokens in a flash!
summary
Explains that OAuth2 plus OpenID Connect returns up to three tokens—the access token, the ID token, and the refresh token—and shows concrete handling: use an OIDC‑certified library, attach the access token in a Bearer header via an HTTP interceptor but restrict allowed origins, decode the ID token payload for claims like roles, and let the library refresh sessions with the refresh token. Demonstrates patterns and gotchas rather than high‑level promises.
AI-written summary · about
related talks
36mTo Identity and Beyond
28mOAuth 2.0 and OIDC
47mIntroduction to OAuth 2.0 and OpenID Connect
33mOAuth and OpenID Connect Deep Dive
45mDemystifying OAuth2 and OIDC
58mOAuth – the good Parts
58mOAUTH, OPENID CONNECT & .NET – THE GOOD PARTS
01h 00mImplementing OpenID Connect and OAuth 2.0 – Tips from the Trenches