OAuth2, OpenID: live-coding SSO, from first principles by Daniel Garnier-Moiroux

OpenID and OAuth2 are the most ubiquituous web protocols when it comes to authentication and authorization. They are somewhat complicated, and usually hard for newcomers to grok. Often explained, rarely understood, it turns out they are are based on a few primitives that are easy to implement. In this presentation, rather than going through the nitty-gritty details and puzzling over inscrutable diagrams, we use code! First, we pick a common language, e.g. Python, Java or Javascript. Then we implement an authentication flow, without using an existing library. This will help you visualize the steps involved, and it'll give you a sense of what that oauth2 library you need to use actually does. #vdc25