OAuth 2 in Action

OAuth 2 is like the web version of a valet key. Instead of unsafe

password-sharing, OAuth offers a much more secure delegation

protocol. OAuth is used everywhere, from large providers like

Facebook and Google, to small APIs at startups, and even cloud

services, it’s the worldwide standard. OAuth 2 is the must-know

security protocol on the web today.

protocol from the perspective of a client, authorization server, and

resource server. It begins with an overview of OAuth and a look at its

components and interactions. Using hands-on examples, it shows how

to build a first OAuth client, followed by an authorization server, and

then a protected resource. The second part of the book dives into

crucial implementation vulnerability, and more advanced topics. By

the end of this book, anyone will be able to build and deploy

applications that use OAuth on both the client and server sides.

Twitter

Readers need basic programming skills and knowledge of HTTP and

JSON.

This HTTP-based security protocol allows the users of a service to enable

applications to use that service on their behalf without handing over full

control. Web and mobile apps can securely access information from other

servers for users, enabling apps to give these users functionality and

services from other sites.