James CollertonA Crash Course In OAuth2.0Sometimes it’s important to let others in 🙏Oct 11, 2022Oct 11, 2022
James CollertonAcquiring and Using Access Tokens in OAuth2.0Basic Choreographies🕺Dec 11, 2022Dec 11, 2022
James CollertonA Crash Course in the OAuth 2.0 Device Authorization GrantAuthorization for input-constrained devicesDec 27, 2022Dec 27, 2022
James CollertonA Crash Course in Open ID Connect (OIDC)Authentication (OIDC) vs Authorization (OAuth2.0)Jan 2, 2023Jan 2, 2023
James CollertonOAuth2.0 Token Introspection and Token RevocationThe Authorisation Server giveth, and it taketh awayJan 10, 2023Jan 10, 2023
James CollertonWhat Does The ‘Authorization: Bearer xxx-yyy-zzz’ Header Mean?That’s right, it’s something to do with OAuth2.0!Jan 14, 2023Jan 14, 2023
James CollertonA Crash Course in the Assertion Framework for OAuth 2.0It’s as exciting as it soundsFeb 3, 2023Feb 3, 2023
James CollertonA Crash Course in Setting Up and Configuring OAuth2.0 ClientsRFCs 7591, 7592 and 8414Mar 27, 2023Mar 27, 2023
James CollertonA Crash Course in OAuth Demonstrated Proof of Possession (DPoP)Proof? You can’t handle the proof!Sep 6, 2023Sep 6, 2023
James CollertonA Crash Course in the Grant Negotiation and Authorization Protocol (GNAP)Flexible authorization for all!Aug 13, 20232Aug 13, 20232
James CollertonHow A Login System WorksCreating accounts, authentication and authorisationJul 2, 2021Jul 2, 2021
James CollertonCookies, Sessions and JWT: The Very, Very BasicsGive me a quick overview of identifying client browsers please!Feb 12, 2021Feb 12, 2021
James CollertonIntroduction to CertificatesI understand certificates, or at least I think I do…Oct 9, 20201Oct 9, 20201