OAuth 2.0 Explained - Authentication Example using OpenID, JWT and Opaque Tokens

In this video I will explain how OAuth works by going over the entire authentication flow and explaining everything from scopes, open id, jwt and opaque tokens. We will go over an example and take a look how an application would receive an access token from the google authorization server. We will also look into the difference between authorization code and authorization code with pkce.

NovelTech Media Python Course:

Github Repository from Video:

If you want to learn how to become a great Software Engineer, Advance your Career, Learn Everything from Python to AWS head over to

Disclaimer:
All videos are for educational purposes and use them wisely. Any video might have inaccurate or outdated information. I give my best to research every topic thoroughly but please be aware that videos can contain mistakes.

[the_explorer]

Nice content delivery and able to understand easily😊

[emilykapelevich]

great and simple explanation. thank you!

[cbest]

Thank you very much for this video. In what case do you think resource server will use both of the ID token and access token. If resource server can confirm the authorization of the access to resource based on the access token, why it would use ID token?

[gevorgghazaryan]

You dont need public key to access the payload of the JWT

[yapayzeka]

this is authorization. false advertising.