Play

Zell Liew - Understanding and using OAuth as a frontend Developer


Authentication is the first obstacle you encounter when trying to connect with any API. These authentication processes often use the OAuth, which means you need to know OAuth to use any API. Unfortunately, OAuth is hard to understand. It is a different language from what you are used to. When you learn OAuth, you need to know new jargon (like Authorization Code Flow), you need to operate in a new environment (in a server instead of a browser), and you need to know enough about web security (so you don't leak credentials by accident). It is a lot to take in. Many developers give up on learning OAuth and they wing it. They use an authentication library and hope it works. But they're trapped by the libraries they use. What if you can't use Passport JS anymore? What if you can't use Auth0 anymore? This talk guides you through a journey to discover OAuth. You will learn what it is, how to use it, and how to connect to any API with OAuth. We'll walk through all the steps you know. We will also talk about web security and how you keep your credentials safe.

    Presenters