Security Essentials for OpenID Connect & OAuth2 | Security Primer | Tech Primers

In this video, we will cover the following basics and essentials concepts for Security
- Authentication and Authorization
- OpenID Connect vs OAuth2
- ID Token vs Access Token
- Resource Server vs Authorization Server
- Resource Owner vs Client

📌 Related Playlist
================

🎬Video Editing: iMovie

🎼Background Music:
Dyalla
Joakin Karud

---------------------------------------------------------------
🔥 Disclaimer/Policy:
The content/views/opinions posted here are solely mine and the code samples created by me are open sourced.
You are free to use the code samples in Github after forking and you can modify it for your own use.
All the videos posted here are copyrighted. You cannot re-distribute videos on this channel in other channels or platforms.
#OpenIDConnect #OAuth2 #SecurityPrimer

[amitagr]

In the quoted example where draw.io is explained as resource server is not correct. Its google drive which is the resource server. Draw.io is the client which is being authorized by end user with the help of google account ( authorization server) to access google drive (Resource server) on behalf of end user for performing some specif tasks.

[HARIBASKARECE]

Bro! Really good video at perfect time. Currently working on Outlook integration in my project. You cleared my doubts which I had these days. Specifically that IdToken. I had been thinking these days, How do we find which user's auth token we are getting in response. Now I am clear. Thanks and You are inspiring me alot. Keep uploading more so that we can learn new things. Following you for the past 1 year :-)

[Ravikirankada]

Very nice video. In the future videos on this topic, please create a sample project to explain these concepts so that we can implement in our projects

[kevinlin]

Don't agree with the video at 11:55 about Resource Server (RS) and Authorisation Server (AS). RS in the example should be the Google Drive server, which is the server that holds the resource; and AS is the Google Authentication server.

[anandnerurkar]

Is it possible to cover event sourcing and cqrs

[KnowledgeGuide]

Thanks for the explanation. I have one doubt. Are the IDToken and the jwt token same ? To me bother are serving the same purpose, just to authenticate the user.

[shanmukhavarma]

Can you make video on fitbit api using springboot

[JavaLovers]

Well can you pls show me the use case in which first authentication will be done through open ID connect from which jwt token would be generated which then passed to Oauth2 for authorisation so basically authentication with Open ID connect and then the response of open ID connect to OAuth 2 is passed simentously so this use case will be end to end with the help of Spring security

[mosesalphonse]

In this example Google drive is the resource server and Google is authorization server and draw.io is the client

[sujithg]

How can we achieve transactions in microservices,

[vijaysingh-zufh]

Please make a video on securing my rest Api using third party oauth2 authorization server jwt token

[VikasKumar-qjvm]

i think resource server is google drive