Let’s talk about OAuth2 and PKCE in Go

Golang TW 57 webinar by Evan Lin https://www.meetup.com/golang-taipei-meetup/events/278400349/.

Related blog post https://engineering.linecorp.com/zh-hant/blog/pkce-line-login/

Transcript

1. Let’s talk about OAuth2 and PKCE in Go LINE Developer Relations Evan Lin 2021.06
2. Evan Lin • LINE Tech Event Organizer • Community Organizer • GDE, Love Golang LINE Technology Evangelist
3. Agenda •OAuth2 and OpenID •How to implement LINE Login in Go •Issue in OAuth2 •Introducing PKCE •How to implement PKCE in Go (LINE Login) •Summary
4. Building a online services / store
5. OpenID Login Registration https://developers.line.biz/en/docs/line-login/web/integrate-line-login/
6. LINE Login Process • SDK https://github.com/kkdai/line-login-sdk-go • Web starter https://github.com/kkdai/line-login-go • Demo site: https://login-tester-evan.herokuapp.com/
7. LINE Login Process
8. Access LINE Login AUTH URL • SDK https://github.com/kkdai/line-login-sdk-go • Web starter https://github.com/kkdai/line-login-go • Demo site: https://login-tester-evan.herokuapp.com/
9. Profile: Access token to call Get Profile API
10. OpenID: Get JWT User Info directly
11. Decode JWT OpenID data • SDK https://github.com/kkdai/line-login-sdk-go
12. Issue in OAuth2 https://datatracker.ietf.org/doc/html/rfc7636
13. PKCE (Proof Key for Code Exchange) • Google RFC since 2015 (RFC 7636) • Also in Google API https://developers.google.com/identity/p rotocols/oauth2/native-app#exchange- authorization-code
14. PKCE (Proof Key for Code Exchange)
15. PKCE (Proof Key for Code Exchange)
16. LINE Login PKCE Process • SDK https://github.com/kkdai/line-login-sdk-go • Web starter https://github.com/kkdai/line-login-pkce-go • Demo site: https://line-login-pkce.herokuapp.com/
17. All GitHub Resources • LINE Login SDK https://github.com/kkdai/line-login-sdk-go • LINE Login Web starter • https://github.com/kkdai/line-login-go • Demo site: https://login-tester-evan.herokuapp.com/ • LINE Login with PKCE Web Starter • https://github.com/kkdai/line-login-pkce-go • Demo site: https://line-login-pkce.herokuapp.com/
18. Summary •Introducing OAuth2 work flow •Introducing PKCE and how it works •Introducing LINE Login related packages in Go (mine) •Feel free to ”star” or “pull request”.