Mô tả

Recent Updates
2023-02-06 More than 17420 satisfied students
2023-01-07 NEW Added 4 new videos on Proof Key for Code Exchange (PKCE)
2023-01-06 More than 17240 satisfied students
2023-01-06 Answered students' questions in the Q&A
2022-12-30 More than 17200 satisfied students
2022-12-29 Answered 4 questions from my students in the Q&A
2022-12-20 Answered 19 questions from my students in the Q&A

This course is for you...

...if you want to improve your market value as a Software Engineer and Security Expert. Imagine what could happen to your professional career if you could add API Security and OAuth skills to your CV! 

API Security experts and engineers who understand OAuth are in HIGH DEMAND, as companies expand their digital business. Plenty of opportunities are waiting for anyone who has the right skills.

Do you want to write best-selling iPhone and Android apps?

The most popular mobile apps integrate with popular social APIs of Google, LinkedIn, Facebook, Paypal, and many more. If this is a well-known fact, why do app developers not just do it?

Many app developers are afraid of complicated OAuth integrations. Security is in fact the biggest hurdle for most mobile app developers.

With the knowledge gained in this course, you can use the secret of the best app developers out there and finally integrate your app with social APIs.

Do you want to start out on your own, as an entrepreneur, consultant, or freelancer?  

Knowing API Security and OAuth allows you to realize the big vision of your company in the field of mobile apps, cloud apps, and web APIs, such as Google, Paypal, and LinkedIn.

Do you want to build exciting solutions with next-generation technology? 

Whether you are a web developer, mobile developer, or API developer, architect, or embedded developer for the Internet of Things, today you need to know OAuth to build state-of-the-art solutions.

What does this course offer?

This course offers an introduction to API Security with OAuth 2.0. In 3 hours you will gain an overview of the capabilities of OAuth. You will learn the core concepts of OAuth. You will get to know all 4 OAuth flows that are used in cloud solutions and mobile apps.

If you have tried to read the official OAuth specification, you may get the impression that OAuth is complex. This course explains OAuth in simple terms. The four OAuth flows are visualized graphically using sequence diagrams. The diagrams are then animated so you get to know the interactions step by step and see the big picture of the various OAuth interactions. This high-level overview is complemented with a rich set of example requests and responses and an explanation of the technical details.

Who should take this course?

Do you believe OAuth is complicated? OAuth may seem complex with flows and redirects going back and forth. This course will give you clarity by introducing the seemingly complicated material by many illustrations. These illustrations clearly show all the involved interaction parties and the messages they exchange.

Do you want to learn the OAuth concepts efficiently? This course uses many animated diagrams and sequence diagrams. A good diagram says more than 1000 words.

Do you want to use OAuth in your mobile app? If you want to access resources that are protected by OAuth, you need to get a token first, before you can access the resource. For this, you need to understand the OAuth flows and the dependencies between the steps of the flows.

Do you want to use OAuth to protect your APIs? OAuth is perfectly suited to protect your APIs. You can learn which OAuth endpoints need to be provided and which checks need to be made within the protected APIs.

Bạn sẽ học được gì

Use OAuth to access Google, Paypal, LinkedIn and Facebook APIs

Use OAuth in Mobile Apps (client-side).

Use OAuth to protect your APIs and Cloud Solutions

Apply OAuth Best Practices.

Choose the correct OAuth Flow flow for your use-case.

Know the OAuth Terminology: Actors, Endpoints, Tokens.

Use OAuth in Cloud Solutions (client-side).

Yêu cầu

  • You should be familiar with basic web service and API development
  • If you would like to use OAuth in a Mobile App, you should know how to develop for the respective platform. Mobile App Development is not covered in this course.

Nội dung khoá học

18 sections

Introduction

4 lectures
Welcome
00:09
Introduction: Preview of the Course
01:31
Introduction: What is covered in this course?
02:49
Introduction: Practice Part
05:30

OAuth Big Picture

7 lectures
Example: OAuth for Third Party Access
03:05
Example: The Password Antipattern
03:30
Example: The Solution provided by OAuth 2.0
04:33
The Password Anti-Pattern
04:47
OAuth 2.0 Solution
05:57
OAuth Basics
3 questions
References to more Information on OAuth 2.0
00:15

OAuth Components

7 lectures
Section Overview: OAuth Terminology
00:58
Overview of OAuth Actors
09:07
OAuth Actors in Detail
09:28
OAuth Endpoints
07:50
The Subway Ticket and the Token
01:14
OAuth Components
1 question
Overview of OAuth Tokens and Credentials
07:58

OAuth Flows: Interactions between the OAuth Components

3 lectures
Example: Interaction of OAuth Components in an OAuth Flow
06:33
Overview of OAuth Flows
04:26
OAuth Flows
3 questions

Authorization Code Flow

3 lectures
Usage Scenario and Features of this Flow
03:44
Authorization Code Flow: Authorization Endpoint
13:04
Authorization Code Flow: Token Endpoint and Resource Access
07:00

Authorization Code Flow: Refresh Tokens

2 lectures
Usage Scenario and Features of the Refresh Flow
01:31
Authorization Code Flow: Refreshing Tokens
10:29

Implicit Flow

1 lectures
Usage Scenarios and Features of the Implicit Flow
01:58

Client Credentials Flow

1 lectures
Usage Scenarios and Features of the Client Credentials Flow
02:02

Resource Owner Password Credentials Flow

1 lectures
Usage Scenarios and Features of the Resource Owner Password Credentials Flow
03:16

Proof Key for Code Exchange (PKCE)

4 lectures
What is Proof Key for Code Exchange (PKCE)
01:50
How the attack works - Part 1
10:12
How the attack works - Part 2
04:35
How PKCE prevents the attack
09:24

OAuth vs OpenID Connect

1 lectures
OAuth vs OpenID Connect
01:57

Use OAuth to access Facebook

2 lectures
Hands On: OAuth Flow on Facebook
19:08
OAuth Worksheet for Facebook
00:25

Use OAuth to access LinkedIn APIs

2 lectures
OAuth on LinkedIn
19:14
OAuth Worksheet for LinkedIn
00:20

Use OAuth to access GMail and other Google Products

5 lectures
Intro to OAuth on Google
09:58
Hands On: Client Registration on Google
08:09
Hands On: OAuth Flow on Google
11:32
OAuth Worksheet for Google
00:35
Hands On: The Google OAuth Playground
05:04

Use OAuth to access Paypal

3 lectures
Intro to OAuth on Paypal
05:26
Hands On: Client Registration and OAuth Flow on Paypal
10:43
OAuth Worksheet for Paypal
00:46

FAQ: OAuth on Mobile

2 lectures
OAuth for Android and iOS
01:41
Redirect URL on Ionic
02:20

Final Mission

1 lectures
Your Final Mission
01:21

Conclusion

7 lectures
Thank you!
00:26
Career Tip: Show what you have learned! Publish your Certificate!
08:35
Get a Better Job
00:12
Book OAuth 2.0: Getting Started in API Security
01:48
Book OpenID Connect – End-user Identity for Apps and APIs
01:28
Other Learning Resources
09:07
Official IETF Specification Document for OAuth 2, RFC 6749
00:01

Đánh giá của học viên

Chưa có đánh giá
Course Rating
5
0%
4
0%
3
0%
2
0%
1
0%

Bình luận khách hàng

Viết Bình Luận

Bạn đánh giá khoá học này thế nào?

image

Đăng ký get khoá học Udemy - Unica - Gitiho giá chỉ 50k!

Get khoá học giá rẻ ngay trước khi bị fix.