The Changelog: Software Development, Open Source

OAuth, "It's complicated." (Interview)

Aug 23, 2021

01:10:24

Creator website

Highlights

AI Chapters

Episode notes

Is There Potential for a Greenfield in Ooththa?

03:32

Is There a Better Way to Do Things?

04:35

What's the Authorization Code?

03:59

Introduction

2min

Are You Tracking Yourself on Purpose?

3min

Do You Have a Map of Your Life?

5min

How Do You Go Back to Your Data?

3min

Is There a Stocker?

6min

The Power of Owning Your Own Domain

2min

Retol Dot Com Slash Change Log - The Source of Truth

3min

Specks - The Documentation of a System

2min

Is There a Better Way to Do Things?

5min

10.

Using a Climtas Token in a Web Service Provider

4min

11.

Transactional Authorization - Is That Still a Thing?

2min

12.

What Is the Difference Between Gnap and Ooth?

5min

13.

Are You Pro or Pro Ooth Two One?

3min

14.

Is There Potential for a Greenfield in Ooththa?

4min

15.

Using the Implicit Flow

2min

16.

What Is the Front Channel and the Back Channel?

6min

17.

What's the Authorization Code?

4min

18.

So the Ooserver Knows the Authorization Code That Was Sent in the Mail, but It's Not Just the Sum.

3min

19.

Is Pixy a Replacement for a Client Secret?

2min

20.

The Apple TV Protocol Is Pretty Transparent to a User

3min

21.

The Developer Day Is on August 20th, and It'll Be a Lot of Fun.

4min

Today we’re joined by Aaron Parecki, co-founder of IndieWebCamp and maintainer of OAuth.net, for a deep dive on the state of OAuth 2.0 and what’s next in OAuth 2.1. We cover the complications of OAuth, RFCs like Proof Key for Code Exchange, also known as PKCE, OAuth for browser-based apps, and next generation specs like the Grant Negotiation and Authorization Protocol, also known as GNAP. The conversation begins with how Aaron experiements with the IndieWeb as a showcase of what’s possible.

Join the discussion

Changelog++ members save 4 minutes on this episode because they made the ads disappear. Join today!

Sponsors:

Gitpod – Spin up fresh, ephemeral automated dev environments, in the cloud, in seconds. Their free tier is open to every developer with a GitLab, GitHub, and/or Bitbucket account. Learn more at gitpod.io
Retool – Retool is a low-code platform built specifically for developers that makes it fast and easy to build internal tools. Instead of building internal tools from scratch, the world’s best teams, from startups to Fortune 500s, are using Retool to power their internal apps. Learn more and try it for free at retool.com/changelog
Square – Develop on the platform that sellers trust! Use API Explorer to interact with, test, or play with your applications in Square. You can build, view, and send HTTP requests that call Square APIs with API Explorer. Get started with Square, check out the API Explorer, or the API Explorer docs.
Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com