Web API Security | Basic Auth, OAuth, OpenID Connect, Scopes & Refresh Tokens

There is a lot that goes into securing a Web API. In this video, I discuss why the industry decided to move on from Basic Authentication and OAuth 2.0 took over as the new standard of securing Web APIs.
This video also covers how OpenID Connect works together with OAuth to solve both Authentication and Authorization.
Scopes and deciding how to use scopes in OAuth is tricky, I also cover some tips for making those decisions. Finally, I talk about refresh tokens and how they help deal with token expiry.
#WebAPIDesign #OAuth #OpenIDConnect
Web API Design Series - Episode 1 - • REST vs RPC vs GraphQL...
Web API Design Series - Episode 2 - • Webhooks vs Websockets...
Timecodes
0:00 - Intro
2:06 - Basic Authentication
5:05 - OAuth
10:16 - OpenID Connect
11:23 - Scopes
13:55 - Refresh Tokens

[@ambientcoder5462]

For the full code implementation, checkout - ruclips.net/video/dyZmsz6usWk/видео.html

[@csakdee]

The music was distracting in the previous ones, but the content is clear and on point! 👏

[@AnkitSingh-dv9pd]

The way you simplified this is honestly genius. I am a fan.

[@prasadmadushan]

I love how u explain things, first problem then solution. it make more sense rather just explaining concept

[@alexanderyashin9383]

Speaking about your 3rd presentation as compared to the previous ones: the further the better. Thanks.

[@metaversity3586]

The way you teach is great! I think your channel will grow a lot with the quality content you provide!
I look forward to more great videos from you!

[@ambientcoder5462]

Thanks a lot for the kind words, really appreciate them :) I've been super busy lately but more videos are coming soon, stay tuned!

[@Sulls58]

I really appreciate your approach to teaching. Thank you!

[@amriteshsingh2952]

Very enlightening video, thanks for creating that.
Appreciate your effort.

[@ankitkumarjat9886]

Great videos so far, keep uploading.

[@kelechiduru962]

You are a great teacher.

[@abhishekchandel4244]

precise and useful, thanks a lot for sharing :)

[@ambientcoder5462]

Glad you enjoyed it!

[@rksck1p]

Yes we need implementation details of each topic it be really great if you start that

[@ademolaayobami8645]

I love your teaching style, it is so unique, Good Job

[@ambientcoder5462]

Thank you for the kind words! Really appreciate it :)

[@alfredoalarconyanez4896]

thank you !

[@easybachha]

Great content. I am surprised the view count is so low, it should be in 100Ks.

[@ambientcoder5462]

Thanks! I hope it get's there someday :D

[@jimzhu7654]

great video

[@nisaanwaar4732]

how is access token validated at api level?

[@raymondmichael4987]

I would like to see a full implementation

[@ambientcoder5462]

Check out the full implementation here - ruclips.net/video/dyZmsz6usWk/видео.html