Category: 2 minutes OAuth

In this episode, I used the Facebook hack as the leeway to explain why using an access token to represent a user is a bad idea.

This week, I have explained often an untalked property of OAuth 2.0.

Hi, Nat Sakimura here. In the last week’s episode, I have explained what are sender constrained tokens But you may wonder where these are going to be used.

In the episode #1, I have explained that OAuth uses metro ticket like “tokens” to access a protected resource. These are called bearer tokens as anybody who bears

I have started a new Youtube video series to explain the concepts of OAuth 2.0 to non-technical people. The series name is “2 minutes OAuth”. As the name