Advanced OAuth Security

سرفصل های دوره

Learn the high-security OAuth extensions described in FAPI: PAR, JAR, JARM, DPoP, Mutual TLS, and HTTP Signatures

1. Intro to this Course

1.1 The Nuts and Bolts of OAuth.html

1. Intro to this Course

2. Part 1 Security in OAuth 2.0

1. Intro to Part 1

2.1 RFC 6749 Section 4.1.html

2. Review of the Authorization Code Flow

3. Front Channel vs Back Channel

4. Front Channel vs Back Channel.html

5. Security Goals

6. Identify the Front Channel vs Back Channel.html

7.1 FAPI Attacker Model.html

7. Attacker Model

8. Protecting the OAuth Flow

9. Security in OAuth 2.0.html

3. Part 2 Securing the Front Channel

1. Intro to Part 2

2. Authorization Code Injection Attacks

3.1 PKCE.html

3. How PKCE Prevents Authorization Code Injection Attacks

4. Calculate a PKCE code verifier and code challenge.html

5. History of PKCE

6. PKCE.html

7. Authorization Server Mixup Attacks

8.1 RFC 9207.html

8. Preventing Mixup Attacks with the Authorization Server Issuer Identifier

9. Mixup Attacks.html

10. The Problems with Starting in the Front Channel

11.1 RFC 9126.html

11. Avoiding the Front Channel with Pushed Authorization Requests

12. Pushed Authorization Requests.html

4. Part 3 Securing the Back Channel

1. Client Authentication in OAuth

2.1 RFC 8705.html

2. MTLS as Client Authentication

3.1 RFC 7521.html

3.2 RFC 7523.html

3. Private Key JWT as Client Authentication

4. Back Channel.html

5. Part 4 Securing Access Tokens

1. Intro to Part 4

2.1 FAPI Requirements for Resource Servers.html

2. Additional Requirements for Access Token Validation

3.1 Bearer Tokens.html

3. The Problem with Bearer Tokens

4.1 Mutual TLS.html

4. MTLS for Sender-Constrained Access Tokens

5.1 DPoP.html

5. DPoP for Sender-Constrained Access Tokens

6. Access Tokens.html

6. Part 5 Non-Repudiation

1.1 FAPI Message Signing.html

1. Intro to Non-Repudiation

2.1 RFC9101.html

2. Signing Authorization Requests (JAR)

3.1 JARM (openid.net).html

3. Signing Authorization Responses (JARM)

4. JAR and JARM.html

5.1 JWT Response for Token Introspection.html

5. Signing Token Introspection Responses

6.1 HTTP Signatures.html

6. Signing All Resource Requests

7.1 HTTP Signatures.html

7. Signing All Resource Responses

8. HTTP Signing.html

9. Summary of Non-Repudiation

7. Wrap-Up

1.1 Get your own OAuth shirt!.html

1. Congratulations!

139,000 تومان

خرید اشتراک افزودن به سبد خرید

خرید دانلودی فوری

در این روش نیاز به افزودن محصول به سبد خرید و تکمیل اطلاعات نیست و شما پس از وارد کردن ایمیل خود و طی کردن مراحل پرداخت لینک های دریافت محصولات را در ایمیل خود دریافت خواهید کرد.

تولید کننده: Udemy-Training