OAuth 2 in Action

DESCRIPTION

OAuth 2 is like the web version of a valet key. Instead of unsafe

password-sharing, OAuth offers a much more secure delegation

protocol. OAuth is used everywhere, from large providers like

Facebook and Google, to small APIs at startups, and even cloud

services, it’s the worldwide standard. OAuth 2 is the must-know

security protocol on the web today.



OAuth 2 in Action teaches practical use and deployment of this

protocol from the perspective of a client, authorization server, and

resource server. It begins with an overview of OAuth and a look at its

components and interactions. Using hands-on examples, it shows how

to build a first OAuth client, followed by an authorization server, and

then a protected resource. The second part of the book dives into

crucial implementation vulnerability, and more advanced topics. By

the end of this book, anyone will be able to build and deploy

applications that use OAuth on both the client and server sides.

 

KEY FEATURES



• Hands-on examples



• Connect with major online services like Google, Facebook,

Twitter



• Takes the reader from beginner to advanced OAuth 2 topics.

 

AUDIENCE

Readers need basic programming skills and knowledge of HTTP and

JSON.

 

ABOUT THE TECHNOLOGY

This HTTP-based security protocol allows the users of a service to enable

applications to use that service on their behalf without handing over full

control. Web and mobile apps can securely access information from other

servers for users, enabling apps to give these users functionality and

services from other sites.