Completed
Weakness of Bearer Tokens
Class Central Classrooms beta
YouTube videos curated by Class Central.
Classroom Contents
OAuth 2.1 and Beyond
Automatically move to the next video in the Classroom when playback concludes
- 1 Intro
- 2 High Security OAuth
- 3 Relevant Documents
- 4 OAuth 2.1
- 5 Rich Authorization Requests (RAR)
- 6 Example (2)
- 7 Example Authorization Request
- 8 JWT Secured Authorization Requests
- 9 Enabling JAR in IdentityServer
- 10 Pushed Authorization Requests PAR
- 11 Pushed Authorization Request & Respo
- 12 Authorization Request using request_
- 13 Shared Secrets
- 14 Recommendations
- 15 Sending a private_key_jwt
- 16 "Proof-of-Possession" History
- 17 Weakness of Bearer Tokens
- 18 Proof of Possession using MTLS
- 19 Mutual TLS
- 20 Sender Constrained Access Tokens w
- 21 Creating an X.509 Client Certificate
- 22 Setting a Client Certificate
- 23 Calling the Token Endpoint
- 24 MTLS Endpoints
- 25 Server Metadata
- 26 Choice of Web Server / Proxy
- 27 Example: Sub-domains with Nginx
- 28 Reading Certificate from Header
- 29 Certificate Authentication Handler
- 30 Enabling MTLS in IdentityServer
- 31 Verifying Access Token Ownership at Rese
- 32 Pipeline Overview
- 33 Summary
