OAuth2 and OIDC for WebRTC скачать в хорошем качестве

OAuth2 and OIDC for WebRTC

Presented by Jonas Primbs at the OAuth Security Workshop 2021 WebRTC is a very common technology these days. Lots of multimedia applications like Jitsi Meet, Discord, or WhatsApp use it to transfer real-time audio and video streams directly between web clients. But all of these applications have one thing in common: Either you must create an account at the service provider or users can join video sessions anonymously without the opportunity to identify them. OpenID Connect can solve this issue, but it requires some considerations to apply it to peer-to-peer (P2P) environments. I would like to discuss a solution to authenticate WebRTC peers by any OpenID Connect Identity Provider and without any centralized Authorization Server required. The solution draft combines existing WebRTC security mechanisms with them of OAuth and OpenID Connect to make it suitible even for financial-grade applications.