HackerTube 中文?

OAuth 2.0 and OpenID Connect (in plain English)

OktaDevYouTube ↗

Further reading 1

If you control one component, what can you make the rest do? →Call a lift, take control of a dashboard, interrupt a drone’s link. Each changes an input. To locate the component that can choose the physical outcome, follow dispatch modes, vehicle gateways and onboard fallback policies.This video helps answer · After sign-in, what can the third-party app access?

Caption notes

The talk uses a third-party app reading contacts to separate two questions: what is the app allowed to access, and who signed in? The speaker explains delegated authorization through OAuth 2.0: the app can receive an access token for limited permissions, such as reading contacts. He then uses OpenID Connect to explain identity at sign-in. The ID token carries information about the authenticated user to the app, while the access token is used to access authorized resources.

Archived captions (transcription method unspecified) ↗
Original passages · 2
key that they use to get into whatever the data that I granted access to
OAuth 2.0 and OpenID Connect (in plain English) · ▶ 18:42–18:47
understand who the user is that just logged in
OAuth 2.0 and OpenID Connect (in plain English) · ▶ 52:09–52:15

Hacker News comments

View original on HN ↗