Mô tả

Enroll in this most comprehensive and HIGHLY rated course on OAuth 2.0 and OpenID Connect and take your understanding of Authentication and Authorization to the next level. Regular updates with latest material, quick Instructor replies and excellent reviews.

Recent Updates :

  • Spring Boot examples updated to Spring Boot 3.0 and Spring Security 6.0 version.

OAuth 2.0 is the industry-standard protocol for authorization. Almost all enterprises today are now using an Authorization Server to protect their REST APIs or have plans to use them in the near future. This course is designed to help Software developers and Application Architects fully understand the concepts behind OAuth and become an expert in integrating their code with any OAuth 2.0 Authorization Server.

You will be able to design your applications using Microservices architecture and fully understand how security can be implemented using OAuth2. The course will especially focus on enterprise applications deployed in the cloud environments right from the start. There are lectures devoted to Java Spring Boot 3.0 and Angular implementations for OAuth Client and Resource Server but the course is designed for a broader audience with knowledge of HTTP and Web Development.


WHAT THE LEARNERS ARE SAYING:

5 STARS - Wow, what a journey. I usually lose focus when it comes to following a whole video course, but this one has been engaging, very interesting and extremely informative

5 STARS - Absolutely perfect. The speaking cadence, the samples, the knowledge on the topic and expertise of the author make this course really great. Very, very useful and clear. 20 out of 10

5 STARS - Amazing course. You will be zero to hero in OAuth2 after completing this course. Very simple and clean way of teaching.

5 STARS - Learnt so much, was using authorization & authentication all these years but really didn't think much about the importance of different kinds of auth. Best course on the internet

5 STARS - Truly fantastic course!

5 STARS - A well thought out and well designed content. Teaching style and approach is very good! Very useful!


You will learn about OAuth by understanding it from many different perspectives.

  • User's perspective by demonstrating a real world application using Shutterfly

  • Architect's perspective by explaining the OAuth flows, Cloud deployments and Identity Brokers using diagrams

  • Developer's perspective by using Postman to create and send messages to Okta and Google Authorization Servers

  • Java Developer's perspective by writing our own Shutterfly application using a Java and Spring Boot 3.0 Application

  • Angular Developer's perspective by writing our own Shutterfly application using Angular Front End

  • Desktop Developer's  perspective by understanding how to protect such applications using OpenID Connect

  • Mobile Developer's perspective by understanding how to protect Mobile applications using OpenID Connect

  • IoT (Internet Of Things) Developer's perspective by understanding how to protect IoT applications using OpenID Connect

  • Tester's perspective by understanding how to test OAuth HTTP messages using Chrome and Postman

  • Understand about Cryptographic Hashing, Encryption and Digital Signatures using openssl

  • Understand about Identity And Access Management features of Okta

  • Understand about JWT Tokens

  • Understand Scope based Authorization versus Role Based Access Control (RBAC)


You will learn about the various OAuth2 Grant Types, Access tokens, JWT tokens, Scopes and PKCE Extension. We will use the Google Authorization Server for explaining Social applications, Okta Authorization Server to explain Enterprise applications and in the process also understand subtle differences between Authorization Servers.

One of the big goals of this course is to understand how OAuth is used in an Enterprise and Cloud today. It's used along with SAML and LDAP together and so it's the goal of this course to explain these integrations end to end. For that reason, this course deliberately attempts to examine LDAP,  SAML and Single Sign-on (SSO) before exploring OAuth2. You will learn about Cloud deployments, Multi-cloud deployments as well as Identity Brokers.

You will be able to get a 360 degree view of OAuth and OpenID Connect by exploring all possible Application integration points for different Architectures.


REMEMBER… I'm so confident that you'll love this course that we're offering a FULL money-back guarantee for 30 days! So it's a complete no-brainer, sign up today with ZERO risk and EVERYTHING to gain.


Bạn sẽ học được gì

Fundamentals of OAuth 2.0 and OpenID Connect framework

Deep dive into all OAuth Grant types using Postman

How to integrate with Okta and Google OAuth 2.0 Authorization Servers

How to write an OAuth 2.0 Client Application using Java Spring Boot 2.x and 3.x

How to best use OAuth 2.0/OpenID in an Enterprise and Cloud Environments

How to write an OAuth 2.0 Resource Server using Java Spring Boot 2.x and 3.x

How to protect Angular Single Page Applications using OAuth and OpenID Connect

How to protect Mobile and Desktop Applications using OAuth and OpenID Connect

How to protect IoT (Internet Of Things) Applications using OAuth and OpenID Connect

How to test your OAuth Application using Google Chrome and Postman

Differences between OAuth Social Applications versus Enterprise Applications

What's the connection between LDAP, SAML and OAuth

Why Social and Internet Applications give us the option to signup using Apple. Google or Facebook

How to handle multiple Authorization Servers using Identity Brokers

What is JSON Web Token (JWT)

Overview of Base64 Encoding, URL Encoding, Hashing, Encryption and Digital Signatures

Yêu cầu

  • Important : Motivation to learn
  • Important : Learners should know basic Web development skills including HTTP
  • Nice to have : Learners should know Java for certain lectures which relate to Java development
  • Nice to have : Learners should know Angular for certain lectures which relate to Angular development
  • No prior knowledge of Okta required

Nội dung khoá học

13 sections

Course Content

4 lectures
Why learn OAuth and OpenID Connect ?
05:49
Course Content
05:21
Explanation of Diagrams
05:34
Cryptography Basics
00:33

Security Fundamentals - LDAP and SAML

9 lectures
Section Overview and Security Basics
02:36
Authentication and Authorization
06:16
LDAP
07:20
Authentication, Authorization and LDAP
3 questions
SAML and Single Sign-On
04:10
SAML Single Sign-On Flow
11:41
Enterprise Application Security and Problem Usecases
08:06
Social Applications and its problems
04:34
SAML
2 questions

OAuth 2.0 Fundamentals

17 lectures
OAuth 2.0 Definition
05:46
OAuth Real World Demonstration
07:40
Authorization in OAuth
00:51
OAuth Roles
03:20
OAuth Client Registration
03:35
OAuth Opaque Access Tokens
05:37
OAuth Structured Access Tokens (JWT)
05:28
Roles, Tokens and Client Registration
4 questions
OAuth Scopes
05:19
Notes on Access tokens and Scopes
01:07
OAuth Endpoints
07:04
Token Revocation Endpoint
00:16
OAuth Grant Types, Refresh Tokens and Token Revocation
21:09
OpenID Connect Scopes
06:49
OAuth Grant Types Summary
02:31
OAuth 2.0 Notes and Links
00:56
OAuth Fundamentals
3 questions

Grants Deep Dive using Google Authorization Server

17 lectures
Section Introduction
03:10
Google Authorization Server : Client Registration
10:34
Finding Google Endpoints
03:54
Client Registration and Endpoints
3 questions
Postman Documentation and Installation
00:49
Deep Dive : Authorization Code Grant Type
29:04
Deep Dive : Authorization Code Grant Type Continued
20:36
Authorization Code Grant Type
4 questions
Deep Dive : PKCE Extension
11:58
Experimentation with Google Drive Resource API
4 questions
Deep Dive : Implicit Grant Type
06:59
Google Playground
10:13
Grants Deep Dive with Google Authorization Server
3 questions
Google Coding Project : Project Explanation
08:51
Google Coding Project : Code Walkthrough
25:08
Google Coding Project : Debugging using Chrome
07:23
Google Coding Project : Spring Boot "My Photos Client" local setup
01:45

Grants Deep Dive using Okta Authorization Server

14 lectures
Okta Authorization Server
04:31
IMPORTANT - Okta User Interface Changes
00:46
Okta Setup
16:49
Custom Resource Server using Spring Boot
09:12
FakeBookAPI Resource Server setup
01:10
Deep Dive : Client Credentials Grant Type
18:59
Client Credentials With Okta
2 questions
Deep Dive : Resource Owner Password Grant Type
11:17
Other Okta Features
10:20
Resource Owner Password Grant with Okta
2 questions
Hands On Experiment with Okta Authorization Server using Postman
1 question
Okta Coding Project : Project Explanation
05:26
Okta Coding Project : Code Walkthrough
18:25
Okta Coding project : Spring Boot "My Photos Client" local setup
02:25

JWT and Client Authentication

6 lectures
Section Introduction
02:52
JWT Token
11:33
Client Authentication using Client Secret
05:29
Client Authentication using JWT
10:28
JWT and Client Authentication
3 questions
Client Authentication Documentation
00:16

OAuth 2.0 for the Enterprise and Cloud

17 lectures
Introduction
02:31
Enterprise versus Social Applications
06:41
Users, Groups and Scopes
03:36
OAuth 2.0 Architecture for the Enterprise
13:27
Login, Logout and Sessions
05:09
User Mapping with Scopes
09:50
RBAC - Role based Access Control
04:46
RBAC - Creating Groups in Okta
08:17
RBAC - Spring Boot Resource Server
11:23
OAuth 2.0 for the Enterprise
3 questions
OAuth 2.0 on the Cloud
11:35
Revisit Enterprise Problem Usecases
02:36
OAuth 2.0 and OpenID Connect
10:33
Handling Multiple Authorization Servers
04:24
Identity Brokers
10:17
OAuth 2.0/OpenID Best Practices
04:54
OAuth 2.0/Open ID for the Enterprise
5 questions

Protecting Single Page Applications : Angular Coding Project

6 lectures
Angular Project Explanation
09:30
Angular Code Walkthrough : Implicit flow using Google
19:14
Angular Code Walkthrough : Authorization Code with PKCE using Okta
05:36
Final thoughts about Angular
03:59
Angular Project Setup
00:29
Protecting Single Page Applications (SPA)
2 questions

Protecting Native Applications (Desktop, Mobile)

5 lectures
Native Applications Versus Web Applications
04:07
Using OAuth in Desktop Applications
11:39
Using OAuth in Mobile Applications
11:03
RFC Link for Native Applications
01:06
Protecting Native Applications
3 questions

Protecting Applications on other Devices (TV, Watches etc.)

4 lectures
Devices with Limited Input Capabilities
02:53
Device Code Grant Type
09:07
RFC Link for OAuth 2.0 Device Authorization Grant
00:13
Protecting Applications on Other Devices
2 questions

Related Lectures and Perspectives

2 lectures
OAuth 2.0 Versus OpenID Connect (OIDC)
10:11
The Idea of Delegated Authentication
14:13

Conclusion

3 lectures
Conclusion
03:40
Documentation and References
00:39
Bonus Lecture
00:16

Bonus - Cryptography Basics - Hashing, Encryption, Signatures

14 lectures
Section Introduction
01:35
Cryptography Theory and Practice
00:29
URL Encoding
02:40
Base64 Encoding
02:15
Cryptographic Hashing
04:32
Symmetric Encryption
03:27
Asymmetric Encryption
07:25
Hybrid Encryption
04:34
Digital Signatures
05:13
openssl - Base64, URL Encoding and Hashing Demonstration
10:39
openssl - Symmetric Encryption Demonstration
04:56
openssl - Asymmetric Encryption Demonstration
08:23
openssl - Hybrid Encryption Demonstration
05:38
openssl - Digital Signature Demonstration
05:20

Đánh giá của học viên

Chưa có đánh giá
Course Rating
5
0%
4
0%
3
0%
2
0%
1
0%

Bình luận khách hàng

Viết Bình Luận

Bạn đánh giá khoá học này thế nào?

image

Đăng ký get khoá học Udemy - Unica - Gitiho giá chỉ 50k!

Get khoá học giá rẻ ngay trước khi bị fix.