Learn OAuth 2.0 - Get started as an API Security Expert

Focused View

Matthias Biehl

4:07:34

46 View

01 - Introduction

001 Welcome.html

002 Introduction Preview of the Course.mp4

01:31

003 Introduction What is covered in this course.mp4

02:49

004 Introduction Practice Part.mp4

05:30

02 - OAuth Big Picture

001 Example OAuth for Third Party Access.mp4

03:05

002 Example The Password Antipattern.mp4

03:30

003 Example The Solution provided by OAuth 2.0.mp4

04:33

004 The Password Anti-Pattern.mp4

04:47

005 OAuth 2.0 Solution.mp4

05:57

006 References to more Information on OAuth 2.0.html

03 - OAuth Components

001 Section Overview OAuth Terminology.mp4

00:58

002 Overview of OAuth Actors.mp4

09:08

003 OAuth Actors in Detail.mp4

09:28

004 OAuth Endpoints.mp4

07:50

005 The Subway Ticket and the Token.mp4

01:14

006 Overview of OAuth Tokens and Credentials.mp4

07:58

04 - OAuth Flows Interactions between the OAuth Components

001 Example Interaction of OAuth Components in an OAuth Flow.mp4

06:33

002 Overview of OAuth Flows.mp4

04:26

05 - Authorization Code Flow

001 Usage Scenario and Features of this Flow.mp4

03:44

002 Authorization Code Flow Authorization Endpoint.mp4

13:04

003 Authorization Code Flow Token Endpoint and Resource Access.mp4

07:00

06 - Authorization Code Flow Refresh Tokens

001 Usage Scenario and Features of the Refresh Flow.mp4

01:31

002 Authorization Code Flow Refreshing Tokens.mp4

10:29

07 - Implicit Flow

001 Usage Scenarios and Features of the Implicit Flow.mp4

01:58

08 - Client Credentials Flow

001 Usage Scenarios and Features of the Client Credentials Flow.mp4

02:02

09 - Resource Owner Password Credentials Flow

001 Usage Scenarios and Features of the Resource Owner Password Credentials Flow.mp4

03:16

10 - Proof Key for Code Exchange (PKCE)

001 What is Proof Key for Code Exchange (PKCE).mp4

01:50

002 How the attack works - Part 1.mp4

10:12

003 How the attack works - Part 2.mp4

04:35

004 How PKCE prevents the attack.mp4

09:24

11 - OAuth vs OpenID Connect

001 OAuth vs OpenID Connect.html

12 - Use OAuth to access Facebook

001 Hands On OAuth Flow on Facebook.mp4

19:08

002 OAuth Worksheet for Facebook.html

13 - Use OAuth to access LinkedIn APIs

001 OAuth on LinkedIn.mp4

19:15

002 OAuth Worksheet for LinkedIn.html

14 - Use OAuth to access GMail and other Google Products

001 Intro to OAuth on Google.mp4

09:58

002 Hands On Client Registration on Google.mp4

08:09

003 Hands On OAuth Flow on Google.mp4

11:33

004 OAuth Worksheet for Google.html

005 Hands On The Google OAuth Playground.mp4

05:04

15 - Use OAuth to access Paypal

001 Intro to OAuth on Paypal.mp4

05:26

002 Hands On Client Registration and OAuth Flow on Paypal.mp4

10:43

003 OAuth Worksheet for Paypal.html

16 - FAQ OAuth on Mobile

001 OAuth for Android and iOS.html

002 Redirect URL on Ionic.html

17 - Final Mission

001 Your Final Mission.mp4

01:21

18 - Conclusion

001 Thank you!.html

002 Career Tip Show what you have learned! Publish your Certificate!.mp4

08:35

003 Get a Better Job.html

004 Book OAuth 2.0 Getting Started in API Security.html

005 Book OpenID Connect End-user Identity for Apps and APIs.html

006 Other Learning Resources.html

006 Preview-API-Architecture-Book.pdf

006 Preview-OAuth2-Book.pdf

007 Official IETF Specification Document for OAuth 2, RFC 6749.html

007 RFC-6749-OAuth-2.pdf

Description

Imagine what could happen to YOUR career if you knew API Security| Udmy for Business approved| 17000 satisfied students

What You'll Learn?

Use OAuth to access Google, Paypal, LinkedIn and Facebook APIs
Use OAuth in Mobile Apps (client-side).
Use OAuth to protect your APIs and Cloud Solutions
Apply OAuth Best Practices.
Choose the correct OAuth Flow flow for your use-case.
Know the OAuth Terminology: Actors, Endpoints, Tokens.
Use OAuth in Cloud Solutions (client-side).

Who is this for?

This course is for beginners in API Security and OAuth.

This course is not for you, if you already know the four basic OAuth flows and how they are used.

What You Need to Know?

You should be familiar with basic web service and API development

If you would like to use OAuth in a Mobile App, you should know how to develop for the respective platform. Mobile App Development is not covered in this course.

More details

Description
RecentÂ Updates
2023-02-06 More thanÂ 17420 satisfied students
2023-01-07 NEWÂ Added 4 new videos on Proof Key for Code Exchange (PKCE)
2023-01-06 More thanÂ 17240 satisfied students
2023-01-06 Answered students' questions in the Q&A
2022-12-30 More thanÂ 17200 satisfied students
2022-12-29 Answered 4 questions from my students in the Q&A
2022-12-20 Answered 19 questions from my students in the Q&A
This course is for you...
...if you want to improve your market value as a Software Engineer and Security Expert. Imagine what could happen to your professional career if you could add API Security and OAuth skills to your CV!Â
API Security experts and engineers who understand OAuth are in HIGH DEMAND, as companies expand their digital business. Plenty of opportunities are waiting for anyone who has the right skills.
Do you want to write best-selling iPhone and Android apps?
The most popular mobile apps integrate with popular social APIs of Google, LinkedIn, Facebook, Paypal, and many more. If this is a well-known fact, why do app developers not just do it?
Many app developers are afraid of complicated OAuth integrations. Security is in fact the biggest hurdle for most mobile app developers.
With the knowledge gained in this course, you can use the secret of the best app developers out there and finally integrate your app with social APIs.
Do you want to start out on your own, as an entrepreneur, consultant, or freelancer? Â
Knowing API Security and OAuth allows you to realize the big vision of your company in the field of mobile apps, cloud apps, and web APIs, such as Google, Paypal, and LinkedIn.
Do you want to build exciting solutions with next-generation technology?Â
Whether you are a web developer, mobile developer, or API developer, architect, or embedded developer for the Internet of Things, today you need to know OAuth to build state-of-the-art solutions.
What does this course offer?
This course offers an introduction to API Security with OAuth 2.0. In 3 hours you will gain an overview of the capabilities of OAuth. You will learn the core concepts of OAuth. You will get to know all 4 OAuth flows that are used in cloud solutions and mobile apps.
If you have tried to read the official OAuth specification, you may get the impression that OAuth is complex. This course explains OAuth in simple terms. The four OAuth flows are visualized graphically using sequence diagrams. The diagrams are then animated so you get to know the interactions step by step and see the big picture of the various OAuth interactions. This high-level overview is complemented with a rich set of example requests and responses and an explanation of the technical details.
Who should take this course?
Do you believe OAuth is complicated? OAuth may seem complex with flows and redirects going back and forth. This course will give you clarity by introducing the seemingly complicated material by many illustrations. These illustrations clearly show all the involved interaction parties and the messages they exchange.
Do you want to learn the OAuth concepts efficiently? This course uses many animated diagrams and sequence diagrams. A good diagram says more than 1000 words.
Do you want to use OAuth in your mobile app? If you want to access resources that are protected by OAuth, you need to get a token first, before you can access the resource. For this, you need to understand the OAuth flows and the dependencies between the steps of the flows.
Do you want to use OAuth to protect your APIs? OAuth is perfectly suited to protect your APIs. You can learn which OAuth endpoints need to be provided and which checks need to be made within the protected APIs.
Who this course is for:
This course is for beginners in API Security and OAuth.
This course is not for you, if you already know the four basic OAuth flows and how they are used.

User Reviews

Rating

average 0

Total votes0

Focused display

I am a techie at heart with a background in APIs, AI, security and software engineering. At some point, I got a Ph.D.I use my technical background to help companies define their digital strategy, execute their transformation agendas, and bring innovations to the market.I love sharing my knowledge in the classroom, at workshops, and in my books. I am an instructor at the API-University, publish a blog on APIs, am the author of several books on APIs, and regularly speak at technology conferences.My goal as an instructor is to create comprehensive step-by-step courses that break down the complex details into small, digestible pieces. I like to build the kind of material that I myself would have loved to have when I was starting out.

Udemy

View courses Udemy

Students take courses primarily to improve job-related skills.Some courses generate credit toward technical certification. Udemy has made a special effort to attract corporate trainers seeking to create coursework for employees of their company.