Tag
Deep dives on OAuth 2.0 — grant types, PKCE, token introspection, refresh-token rotation, resource servers, and production hardening.
4 posts
RFC 9700 establishes essential security guidelines for OAuth 2.0 implementations, addressing critical vulnerabilities like mix-up attacks and redirect URI handling.
Part 7 · OAuth 2.0 RFCs Every Engineer Should ReadExplore RFC 8693's specifications for token exchange, delegation, and impersonation, essential for secure identity propagation in modern OAuth 2.0 architectures.
Part 4 · OAuth 2.0 RFCs Every Engineer Should ReadImplement secure access for your Spring Boot applications by configuring an OAuth 2.0 Resource Server to validate JWT tokens and enforce scope-based access control.
Understand the core components of OAuth 2.0.
Part 1 · OAuth 2.0 & OIDC Mastery Series
