OAuth2 simplified
Download as PPTX, PDF1 like803 views
The document explains OAuth 2.0 by using the analogy of a hotel room key card to represent access tokens, which grant users access to specific resources after authentication. It highlights the importance of security, noting that tokens must be protected, as they can be shared or lost but can be revoked or reissued. The document provides links for further reading on OAuth 2.0.
![Presented By Vanjikumaran
Image is in this Slides are taken from the internet and the base concept taken on [1]
[1] https://www.tbray.org/ongoing/When/201x/2013/05/24/Access-Token-Hotel-Key](https://image.slidesharecdn.com/oauth2-simplified-150328034236-conversion-gate01/85/OAuth2-simplified-2-320.jpg)
OAuth2 simplified
- 2. Presented By Vanjikumaran Image is in this Slides are taken from the internet and the base concept taken on [1] [1] https://www.tbray.org/ongoing/When/201x/2013/05/24/Access-Token-Hotel-Key
- 3. On the way to Vacation!
- 4. And they found the HOTEL
- 6. Security!!
- 9. Formal Request to HOTEL
- 11. HOTEL TOKEN
- 12. Finally Vanji got Access 2 * @ HOTEL
- 13. VANJI has access to RESOURCES
- 14. VANJI has access to room
- 15. Brid view Idea!
- 16. OAuth 2 Access Token ● An OAuth 2 access token is like a hotel- room key card. It gives access, all by itself without further checking, to a particular resource! ● It’s issued to a particular person, who has to be authenticated first (like by showing my driver’s license at the check-in.)
- 17. OAuth 2 Access Token ● Nothing on the outside tells you who it’s been issued to or what it’s for! ● It’s issued to a particular person, who has to be authenticated first (like by showing my driver’s license at the check-in.)
- 18. But!! 2 friends of him next to him!
- 19. TOM borrowed the HOTEL CARD
- 20. TOM has access to RESOURCES
- 21. TOM has access to VANJIs room
- 22. OAuth 2 Access Token ● It’s not encrypted, so you have to take care of it (if a bad guy got it and knew what it was for, he could get into my hotel room and rob me blind.) Check. ● You can give it to someone else and have them access the resource for you!
- 24. OAuth 2 Access Token ● If you lose it, you can go back to the issuer and get another one which is functionally identical. ● It expires after a while.
- 25. READ MORE on OAuth 2.0 ● http://oauth.net/2/ ● http://tools.ietf.org/html/rfc6749