Web API Security | Basic Auth, OAuth, OpenID Connect, Scopes & Refresh Tokens

There is a lot that goes into securing a Web API. In this video, I discuss why the industry decided to move on from Basic Authentication and OAuth 2.0 took over as the new standard of securing Web APIs.

This video also covers how OpenID Connect works together with OAuth to solve both Authentication and Authorization.

Scopes and deciding how to use scopes in OAuth is tricky, I also cover some tips for making those decisions. Finally, I talk about refresh tokens and how they help deal with token expiry.

#WebAPIDesign #OAuth #OpenIDConnect

Timecodes
0:00 - Intro
2:06 - Basic Authentication
5:05 - OAuth
10:16 - OpenID Connect
11:23 - Scopes
13:55 - Refresh Tokens

[csakdee]

The music was distracting in the previous ones, but the content is clear and on point! 👏

[AnkitSingh-dvpd]

The way you simplified this is honestly genius. I am a fan.

[prasadmadushan]

I love how u explain things, first problem then solution. it make more sense rather just explaining concept

[alexanderyashin]

Speaking about your 3rd presentation as compared to the previous ones: the further the better. Thanks.

[Sulls]

I really appreciate your approach to teaching. Thank you!

[amriteshsingh]

Very enlightening video, thanks for creating that.
Appreciate your effort.

[metaversity]

The way you teach is great! I think your channel will grow a lot with the quality content you provide!
I look forward to more great videos from you!

[rksckp]

Yes we need implementation details of each topic it be really great if you start that

[ademolaayobami]

I love your teaching style, it is so unique, Good Job

[abhishekchandel]

precise and useful, thanks a lot for sharing :)

[easybachha]

Great content. I am surprised the view count is so low, it should be in 100Ks.

[nisaanwaar]

how is access token validated at api level?

[raymondmichael]

I would like to see a full implementation