Advanced OAuth and Pitfalls Part 2/2 • Aaron Parecki & Eric Johnson • GOTO 2020

This interview was recorded for the GOTO Book Club. #GOTOcon #GOTOBookClub http://gotopia.tech/bookclub Aaron Parecki - Author of "OAuth 2.0 Simplified" @aaronpk Eric Johnson - Senior Developer Advocate at AWS Serverless PART 1: https://youtu.be/HhwUMESAddM DESCRIPTION Deep dive into some advanced OAuth 2.0 processes and pitfalls like redirect URLs and STATE property. The interview is based on Aaron Parecki's new book "OAuth 2.0 Simplified": https://amzn.to/2A3IMOf TIMECODES 00:00 Intro 00:05 Why is verifying the redirect URL important? 02:40 What does the STATE property do? 06:06 Security considerations as a user & server administrator 15:28 Outro Read the full transcription of the interview here: https://gotopia.tech/bookclub/episodes/advanced-oauth-pitfalls RECOMMENDED BOOKS Aaron Parecki • OAuth 2.0 Simplified • https://amzn.to/2A3IMOf Aaron Parecki • OAuth 2.0 Servers • https://amzn.to/3ecHEsz Aaron Parecki • The Little Book of OAuth 2.0 RFCs • https://amzn.to/3i7qnlC Erdal Ozkaya • Cybersecurity: The Beginner's Guide • https://amzn.to/2T6OIj3 Richer & Sanso • OAuth 2 in Action • https://amzn.to/3hXiAH6 Wilson & Hingnikar • Demystifying OAuth 2.0, OpenID Connect, and SAML 2.0 • https://amzn.to/2U8iLY2 https://twitter.com/GOTOcon https://www.linkedin.com/company/goto- https://www.instagram.com/goto_con https://www.facebook.com/GOTOConferences #OAuth #OAuth2 #OAuth1 #Security #AuthN #AuthZ #PKCE #OAuthServer #Programming #AaronParecki #EricJohnson #Serverless #ProgrammingLanguages #Privacy CHANNEL MEMBERSHIP BONUS Join this channel to get early access to videos & other perks: https://www.youtube.com/channel/UCs_tLP3AiwYKwdUHpltJPuA/join Looking for a unique learning experience? Attend the next GOTO conference near you! Get your ticket at https://gotopia.tech Sign up for updates and specials at https://gotopia.tech/newsletter SUBSCRIBE TO OUR CHANNEL - new videos posted almost daily. https://www.youtube.com/user/GotoConferences/?sub_confirmation=1