Course Overview

What?

This is a fast-track course to understanding how OAuth2 and OpenID work and are recommended to be used today, based on first-hand recommendations from conversations and workshops with the creators and working groups of the OpenID and the Financial-Grade API standards. It is as concise as can be so that you can understand it quickly!

The specs can be quite intense, but they are very important. It is compressed information about implementing OAuth2 and OpenID based on many RFCs, real-life practices, and conversations with industry professionals. This course considers the latest recommendations from the OpenID community, including Google, Microsoft, Auth0, Okta, and Ping Identity.

Use this course to save yourself time and/or get a big head start on some further reading!

Why?

1.  Open banking is picking up around the world and developers are finding themselves having to learn these standards better.

2.  For developers, it's a great learning experience to pick apart Proof of Key Code Exchange, handling network errors and different types of JWT.

3. If you're a developer that wants to add cybersecurity to your skillset, this is a great entry point.

4. Which standard do you think is usually employed for securing microservices?

Why this course?

1. Save Time: This course is designed to fast-track your understanding of the open standards.

2. Accessible: Done by editing captions, testing color visibility of slides, and using existing learning platforms.

3. Up-To-Date: Technology doesn't stop evolving and neither does this course. Check back for updates.

4. Expert Knowledge: An instructor with years of involvement in Financial-grade APIs.

What You Will Learn

  • Learn about Identity and Authentication Fundamentals
  • Learn how OAuth2 and OpenID work as open standards for app security
  • Learn about the difference between OAuth2 and SAML
  • Learn about OAuth2 Grant Types
  • Learn about OAuth2 Error Handling

Program Curriculum

  • Definitions: Identity
  • Definitions: Authentication and Users
  • Definitions: Authentication and APIs
  • Multi-Factor Authentication
  • Authorization
  • Authentication vs. Authorization
  • $7 Million Cybersecurity Scholarship by EC-Council
  • Chapter 1 Quiz

  • Comparing Standards: OAuth 2 vs. SAML
  • Chapter 2 Quiz

  • Terminology
  • Client Registration
  • Grant Types Introduction
  • Chapter 3 Quiz

  • Authorization Code Grant
  • Resource Server (Side Note)
  • Authorization Code + PKCE Grant
  • Implicit Grant
  • PKCE vs. Implicit
  • Resource Owner Password Grant
  • Client Credentials Grant
  • Refresh Token Grant
  • Chapter 4 Quiz

  • Error Responses
  • Network Errors: Front Channel (Side Note)
  • Network Errors: Back Channel (Side Note)
  • Chapter 5 Quiz

  • Comparing Standards 2: OpenID v SAML
  • OIDC Core: User View and Endpoints
  • OIDC Core: JWT
  • OIDC Core: Id Token
  • OIDC Core: Grant Types
  • OIDC Core: Client Authentication
  • Chapter 6 Quiz

  • General Security Considerations
  • Security Considerations: Front Channel
  • Security Considerations: Back Channel
  • Chapter 7 Quiz

  • General Recommendations
  • Recommendations: Clients
  • Recommendations: Providers (Servers)
  • Chapter 8 Quiz
Load more modules

Instructor

Dexter Awoyemi

Software and Data ConsultantOpen Banking

Dexter Awiyemi is a Product engineer. He has been working in Open Finance/Open Banking since 2017. Most recently, he built a platform to helps apps to connect to banks directly. It's private by design and open source.

Join over 1 Million professionals from the most renowned Companies in the world!

certificate

Empower Your Learning with Our Flexible Plans

Invest in your future with our flexible subscription plans. Whether you're just starting out or looking to enhance your expertise, there's a plan tailored to meet your needs. Gain access to in-demand skills and courses for your continuous learning needs.

Monthly Plans
Annual Plans
Save 20% with our annual plans!

Pro

Ideal for continuous learning, offering extensive resources with 600+ courses and diverse Learning Paths to enhance your skills.

$ 499.00
Billed annually or $59.00 billed monthly

What is included

  • 700+ Premium Short Courses
  • 50+ Structured Learning Paths
  • Validation of Completion with all courses and learning paths
  • New Courses added every month
Early Access Offer

Pro +

Experience immersive learning with Practice Labs, CTF Challenges, and exclusive EC-Council certifications for comprehensive skill-building.

$ 599.00
Billed annually or $69.00 billed monthly

Everything in Pro and

  • 800+ Practice Lab exercises with guided instructions
  • 150+ CTF Challenges with detailed walkthroughs
  • New Practice Labs and Challenges added every month
  • 3 Official EC-Council Essentials Certifications¹ (retails at $897!)
    Exclusive Bonus with Annual Plans

¹This plan includes Digital Forensics Essentials (DFE), Ethical Hacking Essentials (EHE), and Network Defense Essentials (NDE) certifications. No other EC-Council certifications are included.

Related Courses

1 of 8