OAuth 2.0

The OAuth 2.0 authorisation framework has become the industry standard in providing secure access to web APIs. It allows users to grant external applications access to their data, such as profile data, photos, and email, without compromising security.

While OAuth 2.0 aims to focus on ease of use for developers, it can still be quite tricky to wrap your head around — especially if you're new to the topic. This hands-on workshop with Aaron Parecki will definitely help you with that.

Whether you’re a software architect, application developer, project manager, or a casual programmer, the workshop will introduce you to the concepts of OAuth 2.0 and demonstrate what is required when building an application that uses OAuth.

Part 1: Understanding OAuth 2.0

In the first part of the workshop, Aaron will walk you through the most important concepts of OAuth 2.0. You will gain a sound understanding of what flows and use cases OAuth 2.0 is covering.

• Why OAuth is important
• OAuth 2.0 terminology & flows
• Grant Types and Use Cases
  • Server-side apps
  • Browser-based apps
  • Native apps
  • Browserless and input-constrained devices
• Tokens, scopes and resources
• Server components
• Available libraries (or do you need one at all?)

Part 2: Implementing OAuth 2.0

The second part of the workshop will be hands-on, so please don't forget to bring your laptop and other necessary equipment along. WiFi will be provided.

The goal will be to make an authenticated API request to a real API using OAuth. To do this, we'll simulate building an OAuth app by walking through the OAuth steps manually using the command line or your favorite HTTP client. We'll build a simple app that talks to a real OAuth API like GitHub, Wunderlist, or any of your choosing. No coding is required, as we'll be walking through the steps using curl or your favorite HTTP client.

When and where is the workshop taking place?

On Wednesday, May 15th, from 10:00 (10am) to 14:00 (2pm). Venue is trivago, Kesselstraße 5-7.

The fee for this workshop will be fully donated to charity.