From the course: Web Security: OAuth and OpenID Connect
Unlock the full course today
Join today to access over 24,600 courses taught by industry experts.
Making OAuth 2.0 useful with extensions - OAuth Tutorial
From the course: Web Security: OAuth and OpenID Connect
Making OAuth 2.0 useful with extensions
- [Instructor] Now that we have a foundation of understanding what OAuth is, we have a couple challenges in front of us. First, when OAuth was initially written in 2012, the internet was a different world. Yes, there were mobile apps, but not nearly as many or as powerful as we have now. Yes, there were smart TVs and other appliances, but really not that many. Single-page apps were still early, Kubernetes, Docker, and all the underlying concepts around DevOps were still in its infancy. In 2012, there's no way that OAuth authors could have envisioned every potential outcome, approach, tech platform and innovation out there, so they did a very simple yet vital thing. They wrote OAuth as a framework. A framework is a little different than a specification. A specification describes all the internal details of how something will work. On the other hand, a framework describes the boundaries and how things will interact. This…