OAuth 2 1: What's New and What's Next скачать в хорошем качестве

OAuth 2 1: What's New and What's Next

Presented by Aaron Parecki at the OAuth Security Workshop 2021 OAuth 2.1 is an in-progress effort to consolidate and simplify the most commonly used features of OAuth 2.0. Highlights of OAuth 2.1 include: PKCE is a required part of the authorization code flow Implicit and Password grants are omitted Refresh tokens should be sender-constrained or one-time use Lots of editorial cleanup to bring the spec up to date! The OAuth working group has continued to make progress on OAuth 2.1 over the past year, but there is still more to do! In this session I would like to provide a summary of the current status of the draft, as well as open the floor to discuss the current open issues. https://oauth.net/2.1/