18,419 views
The authorization code grant is the most complex process in #OAuth 2. In this video, Till explains how authorization and authentication works with this flow, step by step, including all the HTTP messages involved in the process. Contents: 00:00 Introduction 00:34 Structure 01:07 Basic terms of OAuth2 01:48 Server endpoints 02:40 Client credentials 03:06 1. Calling emails resource 03:13 2. Redirect to authorization server 04:59 3. Calling authorization server 05:19 Login is an implementation detail 05:47 4. Redirect to client 06:09 5. Calling client with code 06:12 6. Exchanging code for access token 07:18 7. Receiving the access token 08:36 OpenID Connect Core ID token 08:56 8. Calling the resource 09:59 9.+10. Transfer of the requested data 10:07 Repeat resource calls Article about the video: https://www.predic8.de/oauth2-beispie... REST & API #Security training at predic8: https://www.predic8.de/api-rest-secur...