OAuth and OpenID Connect Deep Dive

on YouTube ↗33m

" summary

Covers OAuth 2.0 mechanics with concrete implementation details: authorization code exchange, mobile callback using a custom URI scheme, token formats and tradeoffs, and OpenID Connect ID tokens as JWTs. Explains access token vs refresh token roles, when tokens are by value vs by reference and consequences for revocation and caching, compares bearer vs holder‑of‑key, and shows the practical need for an authorization server that issues JWTs and a userinfo endpoint for profile scopes.

AI-written summary · about

" chapters (9)

1. 0:00Introduction to API security
2. 1:14The neocity security stack
3. 3:56Understanding OAuth 2.0
4. 7:24Token types and management
5. 10:42JSON identity protocol suite
6. 12:26OAuth authorization flow
7. 18:34Delegation vs authentication
8. 20:06OpenID connect explained
9. 26:58Q&A and closing remarks

" related talks

• 47mIntroduction to OAuth 2.0 and OpenID ConnectPhilippe De Ryck · GOTO Berlin 2018
• 45mDemystifying OAuth2 and OIDCNejmeddine Ben Ouarred · DevFest Toulouse 2025
• 28mOAuth 2.0 and OIDCSara Daqiq · Silicon Valley Code Camp 2018
• 19mOAuth and OpenID Connect in Plain EnglishNate Barbettini · GOTO Chicago 2020
• 45mMastering OAuth 2.0 and OpenID ConnectLeonardo Micheloni · Codemotion Madrid 2025
• 01h 00mImplementing OpenID Connect and OAuth 2.0 – Tips from the TrenchesDominick Baier · NDC Security Oslo 2020
• 31mOAuth 2.1 And OpenID ConnectAbdessamad Temmar · BlaBlaConf 2022
• 48mExplain it to Me Like I’m 5: Oauth2 and OpenIDDaniel Mikusa · SpringOne 2020