$opt_dummy_attribute

Optimizely-Generated Audience for Backwards Compatibility

OAuth2 and OpenID Connect The Professional Guide PDF v0.2

OAuth2-and-OpenID-Connect-The-Professional-Guide PDF-v02

OAuth2 and OpenID Connect The Professional Guide EPUB v02

OAuth2-and-OpenID-Connect-The-Professional-Guide EPUB-v02

0. Introduction
1. Chapter 1 - Introduction to Digital Identity  
    1.1 From User Passwords in Every App...  
    1.2 ...to Directories  
    1.3 Cross-Domain SSO  
    1.4 The Password Sharing Anti-Pattern  
    1.5 Delegated Authorization: OAuth2  
    1.6 Layering Sign In on Top of OAuth2: OpenID Connect  
    1.7 Auth0: an Intermediary Keeping Complexity at Bay  
2. Chapter 2 - OAuth2 and OpenID Connect  
    2.1 OAuth2 Roles  
    2.2 OAuth2 Grants and OIDC Flows
3. Chapter 3 - Web Sign-In  
    3.1 Confidential Clients  
    3.2 The Implicit Grant with form_post  
    3.3 A detailed walkthrough  
    3.4 Anatomy of an ID Token  
    3.5 Principles of Token Validation  
    3.6 Metadata and Discovery
4. Chapter 4 - Calling an API from a Web App  
    4.1 The Authorization Code Grant  
    4.2 Sidebar: Essential Authorization Concepts and Terminology  
    4.3 The Refresh Token Grant  
    4.4 Sidebar: Access Tokens vs. ID Tokens  
    4.5 ID Tokens and the Back Channel  
    4.6 The Userinfo Endpoint  
    4.7 The Hybrid Grant  
    4.8 Client Credentials Grant
5. Chapter 5 - Desktop and Mobile Apps (COMING SOON) 
6. Chapter 6 - Single Page Applications (COMING SOON)

Authentication and authorization are critical parts of any application. They evolved over the years to meet the challenging requirements of the modern Web. OAuth2 and OpenID Connect offer a framework for handling them in an effective way. Learn the best practices in using both standards in different scenarios and application types. This e-book will explain not just the hows, but also the whys of OAuth2 and OpenID Connect.

OAuth2 and OpenID Connect

Cover for the OAuth2 and OpenID Connect ebook

cover-oauth-and-openid

OAuth2-and-OpenID-Connect-The-Professional-Guide PDF

OAuth2-and-OpenID-Connect-The-Professional-Guide notification image

New release:
- Added "Chapter 4 - Calling an API"
- Typo fixes

OAuth2 and OpenID Connect: The Professional Guide

Twitter Card for the OAuth2 and OpenID Connect Ebook

OAuth2 and OpenID Connect: The Professional Guide

Written By

Vittorio Bertocci

Spread the word: