OAuth 2.0 explained with examples

Welcome to the ultimate guide on OAuth 2.0! In this 10-minute video, we'll unravel the complexities of OAuth 2.0, exploring its fundamental workings, identity providers, access tokens, the four types of OAuth flows, and its integration with JWT. Whether you're a seasoned developer or new to the world of digital security, this video will equip you with the knowledge you need.
🔐 Topics Covered:
OAuth 2.0 Basics
Identity Providers
Access Tokens Explained
Deep Dive into OAuth Flows
OAuth vs. Authentication
JWT Integration
🚀 Enhance your app development skills and bolster your understanding of OAuth 2.0-crucial for modern digital security. Hit the "Like" button, subscribe for more tech insights, and let's dive right in!
OAuth Flow Graphic Credit: dev.to/hem/oau...
►LinkedIn: / bytemonk
System Design Interview Basics Playlist:
► • System Design Intervie...
AWS Certification:
►AWS Certified Cloud Practioner: • How to Pass AWS Certif...
►AWS Certified Solution Architect Associate: • How to Pass AWS Certif...
►AWS Certified Solution Architect Professional: • How to Pass AWS Certif...

[@narekpapukyan5455]

Been searching for an easy to understand visual of OAuth...and this is one of the best videos by far! Thank you!

[@LobbanVlogs]

Same here...I needed the visuals for clarity.

[@termsofblunder]

I'm sorry, but you are truly a genius. Your ability to explain all these various different topics and technologies is absolutely remarkable. It is very clear and comprehensible. You are extremely extremely talented, not only in your grasp of technology but in your ability to communicate and convey your knowledge in a manner that others can easily consume and comprehend. Bravo! Bravo! Once again, one of the most talented individuals I have ever seen on the internet.

[@ByteMonk]

Thank you so much for this lovely comment and your support 🙏

[@SleepeJobs]

+100

[@extremeweirdness1528]

@@ByteMonk You are really good most of my doubts got cleared .

[@rpvaghasiya]

why are you sorry for a compliment 😀

[@rstheg]

​@@rpvaghasiyais it not a criminal offence to compliment? 😅

[@josiahroa177]

Just found this channel and it's amazing. Keep it up man, you're providing tons of value to the software design industry.

[@notgreen11]

you’re one of the best at what you do, you give the perfect level of depth, wide variety of subjects, and often include answers to follow up questions

[@srawat1212]

Underrated channel. You'll be having thousands of views in no time. Keep it up.

[@GalPovsod2022]

I just recently founded your channel andI'm amazed! Keep up the great work! God bless!

[@viswanadhkasi2168]

Your video editing skills are amazed brother and colors are great

[@adveshsworld4962]

Excellent explanation on OAuth concepts in plain language to reach broader audiences. Thank you!

[@PC-pr8gi]

Great explanation with nice animation showing all the steps!! Thanks!

[@satya5067]

Brilliant explanation that even a layman like me can understand these concepts to some extent atleast .. thank you so much 🙏

[@sowmiyavenkatesan2525]

Oauth 2.0 is very well explained in this video. Thank you!

[@mdk1983]

a minor audio improvement suggestion for your videos. Applying an EQ which removes frequencies below 80 Hz or 90 Hz (High pass filter), will remove the boominess in your voice and give more clarity and comfortable listening experience.

[@ByteMonk]

Thanks for the tips!

[@ByteMonk]

Would love to connect with you sometime to ensure my audio processing is correct

[@KhalidWar]

This was a well done and well documented video. Thanks very much.

[@JagjitSingh-pf3ji]

Best channel So far in terms of explanation in short duration on basic topics… kudos🔥

[@ramy.yasser]

Great explanation! Thank you!

[@mubafaw]

Nice and elegant explanation. Thanks 👍

[@ismailhamdach2672]

Thank you it was clear and concis.

[@khushbooJahanRiaz]

very precise nice expalnation thanku so much

[@antonyfernando674]

This is an awesome video, very detailed. Thanks for sharing !!!

[@arifmohiuddin9933]

precise and well explained with well animations👍

[@Joseph-oz7tx]

very good video bro , thanks for sharing us

[@sandyj342]

This is too good! Subscribed 😊

[@ByteMonk]

Thank you so much 😁

[@RicardoSilvaTripcall]

Great Explanation !!!

[@sarimhaque3253]

that was soo good!

[@edgiefive1317]

excellent, thank you

[@ziaullahhassan3162]

Great Thank you

[@DheerajKumar-tf8dr]

nice explanation

[@almedinshala8794]

good explanation

[@premraj.m]

Excellent video on OAuth 2.0, but small confusion at 5:15 convert access token encodes to JWT

[@richyeva2149]

Thanks! Good explanation. Could you do a video on CA certificates or self-signed certificates?

[@ByteMonk]

Here :) kzbin.info/www/bejne/eILafI1sr8usoZI You may also checkout relevant videos in the playlist in description.

[@44Whisper44]

I love the animations explaining how it works. May I know what app you use for these?

[@ByteMonk]

FCP, Adobe, Photoshop, Ppro. Takes about 10 hours for a 5-10 minutes video :)

[@44Whisper44]

@@ByteMonk I'd say it's worth it.

[@termsofblunder]

@ByteMonk, just a small piece of feedback: when listening to your videos with headphones, the music at the end is noticeably louder than your voice. The difference in volume makes it uncomfortable for the ears. It would be helpful if the music volume was lower, or at least not louder than your voice, for a more comfortable listening experience. Thank you!

[@ByteMonk]

Thank you 🙏

[@ViswanathTumbalamGooty]

How the resource-server will validate the token? Do the resource server still need to connect to authoriztionserver to get the token validated, once get validated it will fetch the access/permission details from the token?

[@yaswanthyv3837]

What tool using to built presentations?

[@sumeetsinha8575]

The Access token is not generated the way it has been represented. First an Authorization Code is generated and sent to the client app via the user agent. The authorization code is then sent by the client app directly with the the AS to generate the access token which is then used to access the resources.

[@MTX1699]

Hey can you make one for macaroons as well. There aren't enough resources for it online

[@mohamedshahrul1750]

@3:24 u made a mistake saying google's APIs . the correct one is Resource Server.

[@ByteMonk]

Thank you 🙏

[@Loki-vy5vg]

How does the resource server variefies/validates the access/jwt token?

[@ashwithchandra2622]

what if i wanted to authorize which does not uses application of the authorization server i.e, you said in the example that google authorization to access google calendar in an app but what if my app doesn't uses any of those?

[@BLACKNETWORKENTERTAINMENT]

Please can I use this to reset password in my web application

[@SHERSHAAH555]

i want to utilize the oauth with jwt can u plz give me any example repo to refer

4:00 Does the Resource server communicate with Authorization Server when validating the Access Token? I assume it should have...

Hmm, maybe it does not. AI gave me this response: "The Resource Server can validate the JWT independently, without contacting the Authorization Server, by: a. Verifying the signature using the public key of the Authorization Server. b. Checking the expiration time (exp claim) of the token. c. Validating other claims in the token (e.g., issuer, audience, scope)."

[@noyou174]

The ressources server validate by either a public key or forwarding to authorization server but mostly by public key

[@varsityoftruth]

Should there be an arrow or two between auth and resource servers?

[@ruksharalam173]

How did you creat the OAuth 2.0 flows?

[@cccc2740]

I am not clear how does resource server validates token. Video doesnt mention any interaction between resource server and authorization server.

[@abimanoharan2378]

this is my confusion as well

[@cccc2740]

@@abimanoharan2378 i got it. Token provided by authorization server has the information that resource server needs to contact authrization server. So when resource server receives token, it parses it and then uses that info to connect to auth server and validates the authenticity of token.

[@TragicGFuel]

Don't have to

[@user-fr6tr7vx7y]

hello currently i worked with django application & i have one query about authentications is oauth2.0 is more secure then session ?? because currently i using session authentication flow that return session key when we pass user name or password

[@priyanshusahu7869]

Thanks man for the explanation, I have one request do you have any research papers related to 0auth 1.0 and 0auth 2.0, any reference would work also, I would be very helpful to you, Thanks again.

[@ByteMonk]

Thank you! Its primarily based on my previous experience with OAuth and SSO in general. Unfortunately I did not maintain the list of papers and articles I went thru to make this video.

[@saravanasai2391]

JWT is not a protocol. OAuth2.0 is protocol. JWT is used like access card which holds the required information for authorization.

[@ganesha3559]

Can you do 1 video on SAML?

[@ByteMonk]

SAML video just released!

[@ganesha3559]

@@ByteMonk awesome.

[@pavanimmadisetty5099]

All the topics are covered....but the animations are poor.

[@ByteMonk]

Thanks for your feedback. Please let me know what to be improved and if you have any reference animated videos.

[@user-th9nk6hs4w]

but once the client app has that token, it can request any information Google stores about the user??? it can consult his emails? his calendar? his maps history??? so instead of signing up in that web app filling a basic form with basic personal data, we use Oauth with Google (in this example) so the wep app can retrieve A LOT MORE INFORMATION about the user??!

[@elliotthuff5634]

Whenever you grant it access it shows what information the app wants to access. It doesn't get everything

[@bryantwooters9527]

The ping is so freaking loud. My gosh.