Token-based security for web applications using OAuth2 and OpenID Connect

The token has become a popular pattern for securing web applications. Developers love its conceptual simplicity, and architects appreciate the ability to design applications with nicely decoupled security roles. However, pitfalls lurk in the ease of this token-based security. Within the last decade, two security standards have taken center stage to provide guidance and support for the implementation of robust security infrastructure. These standards are OAuth 2 and OpenID Connect.

In this presentation, Vladimir Bychkov will cover the basics of these security protocols, explain and demo the authorization flows for different types of applications and provide tips for implementation of centralized authorization service using ASP.NET Core.

// Requirements //
Some experience building web applications required

// Agenda //
6:30: Socializing and Food
7:00: Introductions and Announcements
7:05 Kickoff
8:00: Wrap up

// Parking and Metro //
Parking at 2100 - 2300 Clarendon Blvd is free after 6:00. Enter the garage at 2100 Clarendon Blvd and turn right for gated parking in the garage or turn left for metered parking. The ATX is located at Courthouse Metro on the Orange and Silver lines.