OAuth is a funky protocol. Seriously. Who even likes it? In this episode we'll discuss what, exactly, is up with OAuth, and why the hell people keep talking about it. Our guests for this episode are Tom Abbott (Product Manager at Stormpath), and Les Hazlewood (CTO at Stormpath).
This episode covers:
What is OAuth for? Why is it needed? Why not use Basic Auth? How does OAuth work (high level)? What are tokens / JWTs? What are grant types? What are scopes? What types of OAuth are there? How does OAuth work in a browser? (Implicit and authorization code.) How does OAuth work for APIs? (Client credentials and password.) When should a developer use OAuth? Basic Auth?
