Getting Started: OpenID Connect

Vem är kursen för?

Den här videokursen är för alla utvecklare som arbetar med OpenID Connect, oavsett om du använder .NET, Java, Node.js eller något annat. Kursen handlar om protokollen och är inte knuten till ett visst framework eller bibliotek.

Kursinnehåll

1. Course OverviewWelcome; What You Will Learn; Who is the course for and prerequisites
2. Getting StartedCourse Material; Installing Fiddler; Fiddler and HTTPS; Development Environment and HTTP Files; OpenSSL; The Demo Application; The Demo Environment
3. Introduction to OAuthThe Need for OAuth; Delegated Access; Introducing OAuth 2; Introducing OpenID Connect; OAuth Dance
4. OpenID ProviderThe Need for an OpenID Provider; OpenID Provider Implementations; Federated Authentication; Exploring the OpenID Provider
5. Implicit FlowOAuth and OpenID Connect Flows; Browser-based Applications; Backend-based Applications; Why the Implicit Flow Was Deprecated
6. TokensToken Introspection; Opaque Tokens; JSON Web Token; ID Token; Access Token
7. Claims and ScopesClaims; Scopes; UserInfo Endpoint; Advanced Scopes and Claims
8. Signing the TokensSecuring JWT Tokens; Unsecured Tokens; Signed Tokens; Symmetric Signed Tokens; Asymmetric Signed Tokens; RSA Signed Tokens; Elliptic Curve Signed Tokens
9. Token ValidationKey Distribution; Key Rotation; Signature Validation; Claims Validation
10. Authorization Code FlowIntroducing the Flow; From Code to Tokens; Introducing Refresh Tokens; Using Refresh Tokens; Observing OpenID Connect
11. Securing the FlowsThe State Parameter; Advanced Uses of State; Trusting the Tokens with Nonce and at_hash; The need for PKCE; PKCE Explained
12. Single Sign-On and Sign-OutSingle Sign-On; Sign-Out; The Sign-Out Flow; Token Revocation
13. Client Credentials FlowIntroducing the Flow; Calling APIs; Comparing the Flows
14. Course ConclusionOAuth 2.1 and Best Current Practices; OAuth and OpenID Connect Summary; Conclusion and Next Steps

Nästa steg

Vill du implementera OpenID Connect i ASP.NET Core är min videokurs Getting Started: Authentication and Authorization in .NET ett bra nästa steg. Den visar hur ASP.NET Core hanterar inloggning, cookies och behörighet under huven.