Intro to OAuth 2.0

Intro to OAuth 2.0

An open protocol to allow secure authorization in a simple and standard method from web, mobile and desktop applications.

OAuth 2.0 Roles

I want to see projects

Hey Back&, could you please give me a list of projects?

This is a protected resource.  You will need to present me an access token

Hey Github, can I get an access token please? 

Back& is asking

Sure, just need to ask a few details to the user first

Could you please provider me your credentials?  I need to verify your identity

No probolem.  I am justin@ionic-az.org and my password is ****

The user is who he claims to be.  Here is your access token: 
hjC07IK5AS65WjPxL8TZJQgH2hcTtaAg8QDo5mIizM3wRrYO2w30qaYYvN0YLqyq

Hi Back&, this is my token
hjC07IK5AS65WjPxL8TZJQgH2hcTtaAg8QDo5mIizM3wRrYO2w30qaYYvN0YLqyq

Hi, I have been given
hjC07IK5AS65WjPxL8TZJQgH2hcTtaAg8QDo5mIizM3wRrYO2w30qaYYvN0YLqyq

Could you please tell me who it belongs to?

Sure.  The token is still valid and belongs to justin@ionic-az.org

Here is your list of projects

Here is your list of projects

OAuth is a delegation protocol, as in the

Client 

has no idea about the credentials of the

Resource Owner

Example Token Response

{
 "access_token": "RsT5OjbzRn430zqMLgV3Ia",
 "token_type": "Bearer",
 "expires_in": 3600,
 "refresh_token": "e1qoXg7Ik2RRua48lXIV"
}

Auth0

Eliminating the friction of identity

http://auth0.com

What is it?

• Identity as a service platform

• Making authentication and authorization simple 

• Makes it so developers do not need to become experts 

Tech Stack Support

• Javascript / Angular

• .NET

• Node

• iOS

• PHP

• Java

Virtually anything able to send HTTP request can integrate with Auth0

Social Identity Providers

• AOL

• Amazon

• Basecamp

• Evernote

• Facebook

• Fitbit

• Github

• Google 

• Instagram

• LinkedIn

• Microsoft

• PayPal

• Salesforce

• Twitter

• Wordpress

• Yahoo

Enterprise Identity Providers

• ADFS

• Active Directory

• Azure Active Directory

• Google Apps

• LDAP

• SharePoint Apps

• WS-Federation

Database Identity Providers

Email / Username and password stored in Auth0 user store or your own database

Password Less Identity Providers

• Email (One-Time Code)

• SMS

• iOS Touch ID

Multi-Factory Support

• Google Authenticator

• Duo Security

3rd Party Integration

Pricing

* Active User: someone logged in in last 30 days

Status of Service

http://status.auth0.com/