OAuth 2.0: Getting Started in Web-API Security (API University Series) (Volume 1)

OAuth 2.0: Getting Started in Web-API Security (API University Series) (Volume 1)
By Matthias Biehl

Price: $17.99 Details

Availability: Usually ships in 24 hours
Ships from and sold by Amazon.com

24 new or used available from $17.14

Average customer review:
(17 customer reviews)

Product Description

This book offers an introduction to API security with OAuth 2.0 and OpenID Connect. In less than 80 pages you will gain an overview of the capabilities of OAuth. You will learn the core concepts of OAuth. You will get to know all four OAuth flows that are used in cloud solutions and mobile apps. If you have tried to read the official OAuth specification, you may get the impression that OAuth is complex. This book explains OAuth in simple terms. The different OAuth flows are visualized graphically using sequence diagrams. The diagrams allow you to see the big picture of the various OAuth interactions. This high-level overview is complemented with rich set of example requests and responses and an explanation of the technical details. In the book the challenges and benefits of OAuth are presented, followed by an explanation of the technical concepts of OAuth. The technical concepts include the actors, endpoints, tokens and the four OAuth flows. Each flow is described in detail, including the use cases for each flow. Extensions of OAuth are presented, such as OpenID Connect and the SAML2 Bearer Profile.

Who should read this book?

You do not have the time to read long books?
This book provides an overview, the core concepts, without getting lost in the small-small details. This book provides all the necessary information to get started with OAuth in less than 80 pages.

You believe OAuth is complicated?
OAuth may seem complex with flows and redirects going back and forth. This book will give you clarity by introducing the seemingly complicated material by many illustrations. These illustrations clearly show all the involved interaction parties and the messages they exchange.

You want to learn the OAuth concepts efficiently?
This book uses many illustrations and sequence diagrams. A good diagram says more than 1000 words.

You want to learn the difference between OAuth and OpenID Connect?
You wonder when the two concepts are used, what they have in common and what is different between them. This book will help you answer this question.

You want to use OAuth in your mobile app?
If you want to access resources that are protected by OAuth, you need to get a token first, before you can access the resource. For this, you need to understand the OAuth flows and the dependencies between the steps of the flows.

You want to use OAuth to protect your APIs?
OAuth is perfectly suited to protect your APIs. You can learn which OAuth endpoints need to be provided and which checks need to be made within the protected APIs.


Product Details

  • Amazon Sales Rank: #731187 in Books
  • Published on: 2015-01-31
  • Original language: English
  • Number of items: 1
  • Dimensions: 9.00" h x .20" w x 6.00" l, .26 pounds
  • Binding: Paperback
  • 86 pages

Editorial Reviews

About the Author
For 7 years Matthias has consulted large international and national companies on software architecture, software development processes and software integration. At some point he got a PhD. Nowadays, Matthias uses his background in software engineering to help companies bring innovative software solutions to the market. Matthias enjoys sharing his knowledge and experience in the classroom, at in-person workshops, in online courses or in books. Matthias is an instructor at the API-University (api-university.com), publishes a blog on APIs, is author of several books on APIs and software architecture and regularly speaks at technology conferences.


Customer Reviews

Most helpful customer reviews

1 of 1 people found the following review helpful.
5*Very* good intro to OAuth 2.0
By Chris Verachtert
There are quite some good publications on OAuth 2.0 and this introduction written by Matthias Biehl is one of the best.
If you want to get up to speed on OAuth quickly and don't want to wade through a 300+ page book, you cannot go wrong with this book.
The diagrams it contains are very helpful in grasping the overall concepts.
If I could give it 6 stars, I would.

In short: it's a gem.

1 of 1 people found the following review helpful.
5Super clear, easy read
By Horace Williams
Clear, and precise. Yes, it's short - but one of clearest guides you will find anywhere. Also like that it's language agnostic and focused on oauth and the flow itself. A lot of explanations clutter themselves with a cumbersome / blackbox / "hey it just works!" implementation libraries.

0 of 0 people found the following review helpful.
4Nice cheat sheet
By Kindle Customer
A cheat sheet book to quickly understand Oauth, really helped me to move forward, now I read the rfc and don't get scared because of so much jibber jabber. I'm putting 4 stars because I found 2 errors and I could never download the promised oauth cheat sheet from the page

See all 17 customer reviews...

Connect with defaultLogic
What We've Done
Led Digital Marketing Efforts of Top 500 e-Retailers.
Worked with Top Brands at Leading Agencies.
Successfully Managed Over $50 million in Digital Ad Spend.
Developed Strategies and Processes that Enabled Brands to Grow During an Economic Downturn.
Taught Advanced Internet Marketing Strategies at the graduate level.



Manage research, learning and skills at defaultLogic. Create an account using LinkedIn or facebook to manage and organize your IT knowledge. defaultLogic works like a shopping cart for information -- helping you to save, discuss and share.


  Contact Us