https://speakerdeck.com/neilmadden 2018-12-08 09:53:51 -0500 Presentation given at Bristech 2018 in Bristol, UK. I discuss various potential security issues to be considered when implementing OAuth 2.0 as a resource server and for clients on mobile, server-side and client-side javascript (single page apps). The talk covers the latest best common practice advice currently in development at the IETF OAuth Working Group, including potential deprecation of the implicit flow in favour of authorization code + PKCE. Presentation given at Bristech 2018 in Bristol, UK. I discuss various potential security issues to be considered when implementing OAuth 2.0 as a resource server and for clients on mobile, server-side and client-side javascript (single page apps). The talk covers the latest best common practice advice currently in development at the IETF OAuth Working Group, including potential deprecation of the implicit flow in favour of authorization code + PKCE. Thu, 06 Dec 2018 00:00:00 -0500 https://speakerdeck.com/neilmadden/oauth-2-what-could-possibly-go-wrong https://speakerdeck.com/neilmadden/oauth-2-what-could-possibly-go-wrong