Introduction
Cookie-based Authentication
- 3 Cookies 🎁
- 4 Cookie-based Authentication
- 5 Cross-Site Request Forgery (CSRF)
- 6 CSRF Tokens
- 7 DEMO with Angular
- 8 CORS
- 9 Cross-site scripting (XSS)
- 10 Common critiques of Cookie-Based Authentication
OAuth 2.0 and OpenID Connect
- 11 OAuth 2.0 - Introduction
- 12 OAuth 2.0 - Terminology
- 13 Authorization Server setup
- 14 Authorization Code Flow
- 15 Do you need to store tokens?
- 16 Authorization Code Flow with PKCE
- 17 OpenID Connect (OIDC)
- 18 JSON Web Tokens (JWT)
- 19 OAuth DEMO with Angular
- 20 BONUS: Implicit Flow (deprecated)
- 21 BONUS: Implementing multiple login options
- 22 BONUS: Interacting with multiple providers
Other strategies