WeChat ID
aaronpk_tv
-
San Francisco, California • Mon, April 1, 2019 7:15amSetting up for my all day #OAuth workshop!
-
I'm not at @devnexus this year, but my #OAuth books are! You can win a copy if you're there!
https://twitter.com/oktadev/status/1103679346122915840 -
Tomorrow morning I'm joining @jlengstorf on Twitch and we're going to add user authentication to a @gatsbyjs site live! This will be my first time using Gatsby, so should be a fun ride!
📅 Thursday, Feb 28
🕘 9:00am Pacific
📺 https://www.twitch.tv/jlengstorf -
The video from my @OReillySACon talk is up! "OAuth: When Things Go Wrong" https://www.youtube.com/watch?v=H6MxsFMAoP8
-
I mentioned in my #OAuth talk last week that I was working on a blog post describing how to add the Device Flow to any OAuth server, and I just finished the post! \o/ 🔐 https://developer.okta.com/blog/2019/02/19/add-oauth-device-flow-to-any-server
-
always fun to google the random strings I make up for my OAuth examples and see who else's API docs and tutorials they end up in: https://www.google.com/search?q=RsT5OjbzRn430zqMLgV3Ia
-
I just posted the slides from my #OReillySACon talk last week!
OAuth: When Things Go Wrong
https://speakerdeck.com/aaronpk/oauth-when-things-go-wrong -
at The FishbowlNew York, New York • Thu, February 7, 2019 11:08amSetting up for my #OAuth workshop!
-
#OReillySACon Come by the @okta booth if you'd like some #oauth cat stickers! Also if you want a PDF of my book and the slides from the talk, make sure we scan your badge!
-
I'm giving a talk on #OAuth at #OReillySACon tomorrow! 3:50pm in Sutton North. I'll have books and cat stickers to give out afterwards too! https://conferences.oreilly.com/software-architecture/sa-ny/public/schedule/detail/75121
-
If you've ever needed a link to send someone to explain why OAuth secrets aren't safe in mobile apps, I made you a thing: https://developer.okta.com/blog/2019/01/22/oauth-api-keys-arent-safe-in-mobile-apps
-
A pretty good step-by-step walkthrough of the @oauth2 PKCE flow by @afitnerd https://developer.okta.com/blog/2018/12/13/oauth-2-for-native-and-mobile-apps
and yes it's pronounced "pixie" -
Take 3 minutes to learn how OAuth access tokens are like a hotel keycard! 🔐💳
https://www.youtube.com/watch?v=BNEoKexlmA4 (Filmed last week at my hotel!) -
Yet another example of why SMS is terrible for 2fa and account recovery.
"the database — running on Amazon’s Elasticsearch — was configured with a Kibana front-end, making the data within easily readable"
https://techcrunch.com/2018/11/15/millions-sms-text-messages-leaked-two-factor-codes/ -
Alright, I think we can call it. Between @tlodderstedt's OAuth Security Best Practices and OAuth 2.0 for Browser Apps, the Implicit Flow is dead.
https://tools.ietf.org/html/draft-ietf-oauth-security-topics-09
https://tools.ietf.org/html/draft-parecki-oauth-browser-based-apps-00
https://medium.com/@torsten_lodderstedt/why-you-should-stop-using-the-oauth-implicit-grant-2436ced1c926 -
I learned a lot about writing WordPress plugins making this! Kinda cool that you can completely take over the WordPress login screen like this too. https://developer.okta.com/blog/2018/10/30/wordpress-authentication-with-okta
-
Listening to @tlodderstedt present some new OAuth 2.0 Security recommendations #iiw
-
Congrats @strava on some great looking #OAuth security updates to your API! https://developers.strava.com/docs/oauth-updates/
