The Nuts and Bolts of OAuth 2.0

This website is a companion to the course The Nuts and Bolts of OAuth 2.0 and Hands-on Introduction to OAuth 2.0 by Aaron Parecki. You should enroll in the course if you'd like to use this website!

What You'll Learn

OAuth 2.0, OpenID, PKCE, deprecated flows, JWTs, API Gateways, and scopes. No programming knowledge needed.

• ✓ The basics of OAuth 2.0 and OpenID Connect
• ✓ Best practices for developing OAuth applications (server-side, native, and SPAs)
• ✓ How to implement an OAuth client from scratch
• ✓ How to protect an API with JWT access tokens

Exercises

• Getting Started
• OAuth for Web Applications
• OAuth for Single-Page Applications
• OAuth for Machine-to-Machine Applications
• Refresh Tokens
• OpenID Connect