OAuth w/ Passport

+ documentation interaction!

Objectives

  • Describe and explain OAuth and it's role in web authentication
  • Carefully read error messages generated from framework code and reason through possible causes based on current knowledge of Express
  • Use targeted searches in documentation to answer specific questions or inform hypothesis
  • Build and ship an app that allows users to login via OAuth using Passport

What is 'OAuth' ?

a standard for token-based authentication obvs...

What is Passport?

a JS framework to make your life easier when you're implementing authorization

How does Google / Facebook / LinkedIn etc... communicate with your local web app during development? Isn't that private (aka not published on the internet)?

What part of your existing authentication / authorization flows does this replace?

Why would you want to authenticate with Google / Facebook instead of storing the emails / passwords yourself?

Choose your own adventure

  • Individually
  • In pairs
  • Small group w/o me :(
  • Small group w/ me :)
Made with Slides.com