When my boss told me I was issuing a token to myself I knew I needed help.
There I was needing to secure an API using Azure AD with no prior web authentication experience other than “we look up your hashed password in a database”. I didn’t know where to even begin! As it turned out I had to ask for help with the assignment but I knew I would need to brush up on this topic later on in my career.
Fast forward a few months and I decided to pick up this book. I read every chapter and completed all the examples and I now feel like a true expert. In all honesty, the OAuth 2.0 flows themselves are not complex and their power lies in their simplicity, but this book does a great job at keeping a good pace and covers all the concepts throughly with consideration of the “why” and not just the “how”.
I recommend reading the entire book for anyone that wants to have a solid grasp on OAuth but a crash course can be obtained by just reading parts one and two.
I will say I was burned out by the time I reached chapters 14-15. They were simply too complex for me to retain at the time, but I am going to circle back and reread those chapters in the future. One other technical issue is the shipped code does not work with the latest NoSQL npm package so I had to find a workaround to get the assignments to work properly.
If you were like me faced with securing an API and don’t know the difference is between an access code and a token, pick this up right now!
Enjoy fast, free delivery, exclusive deals, and award-winning movies & TV shows with Prime
Try Prime
and start saving today with fast, free delivery
Download the free Kindle app and start reading Kindle books instantly on your smartphone, tablet, or computer - no Kindle device required.
Read instantly on your browser with Kindle for Web.
Using your mobile phone camera - scan the code below and download the Kindle app.
Follow the authors
Something went wrong. Please try your request again later.
Frequently bought together
This item: OAuth 2 in Action
$47.00
Get it as soon as Wednesday, Jul 31
In Stock
+
$34.00
Get it as soon as Wednesday, Jul 31
In Stock
+
Solving Identity Management in Modern Applications: Demystifying OAuth 2, OpenID Connect, and SAML 2
$42.27
Get it as soon as Thursday, Aug 1
Only 4 left in stock - order soon.
Total price:
To see our price, add these items to your cart.
Choose items to buy together.
Similar items that may ship from close to you
Page 1 of 1 Start overPage 1 of 1
From the Publisher
About this Book
This book is intended to be a comprehensive and thorough treatment of the OAuth 2.0 protocol and many of its surrounding technologies, including OpenID Connect and JOSE/JWT. We want you to come away from this book with a deep understanding of what OAuth can do, why it works the way that it does, and how to deploy it properly and securely in an unsafe internet.
The target reader for this book is someone who’s probably used OAuth 2.0, or at least heard of it, but doesn’t really know how it works or why it works that way. Maybe you’ve even developed one or more OAuth 2.0 components, such as a client to talk to a specific API, but you’re curious about other kinds of clients, or other parts of the OAuth 2.0 ecosystem. Perhaps you wonder, 'What’s the authorization server doing when you go ask for that authorization code, anyway?' Or perhaps you’re tasked with protecting an API and you want to know if OAuth 2.0 is really going to do the job, and if so, how are you supposed to manage that? Maybe in your day job you’re building a client, but you want to know what the protected resource does with that token you sent it. Or maybe you’re building and protecting an API, but you want to know what the authorization server you’re talking to does to get those tokens into the right place. We want you to understand what the tool, OAuth 2.0, is really good at and how you can wield it effectively.
We’re going to assume you know the basics of how HTTP works, and at least understand the utility of encrypting connections using TLS, if not the intimate details of how it works. Our code is all in JavaScript, but this isn’t a book about JavaScript, and so we’ve done our best to explain the abstractions and functionality that the code itself represents so that you can apply it to your own platform and language.
Top reviews from the United States
There was a problem filtering reviews right now. Please try again later.
Reviewed in the United States on January 3, 2019
Reviewed in the United States on August 27, 2017
Reviewed in the United States on February 21, 2019
Reviewed in the United States on September 1, 2017
Reviewed in the United States on August 11, 2017
Top reviews from other countries
Cliente de Amazon
Si quieres entender OAuth este libro es para ti
Reviewed in Mexico on December 2, 2019Ying Sun
Great book for anyone who wants to learn OAuth!
Reviewed in Canada on June 15, 2018
Kevin Mayfield
Top resource for OAuth2
Reviewed in the United Kingdom on December 13, 2017