OAuth 2.0 - It's the Implementation, Stupid

Explore the intricacies of OAuth 2.0 implementation in this 50-minute conference talk from GrrCON 2014. Delve into key concepts, including introductions, terminology, roles, OAuth elements, grant types, and client types. Learn about the Authorization Code Grant and Implicit Grant processes. Gain important insights and understand the risks associated with Authorization Code Replay. This comprehensive presentation provides a deep dive into the practical aspects of OAuth 2.0, emphasizing the critical role of proper implementation in securing authentication and authorization processes.

Intro
INTRODUCTIONS
INTRODUCTION TO OAUTH 2.0
TERMINOLOGY - ROLES
TERMINOLOGY - OAUTH ELEMENTS
TERMINOLOGY - GRANT & CLIENT TYPES
AUTHORIZATION CODE GRANT
IMPLICIT GRANT
IMPORTANT NOTES
AUTHORIZATION CODE REPLAY