3 ms·
The author's posts are well written. I browsed through several related articles because I'm doing some work in the authz/authn space right now and this helps to
by xwowsersx 3y ago
The author's posts are well written. I browsed through several related articles because I'm doing some work in the authz/authn space right now and this helps to get my head back into it a bit. None of the articles seem to go super deep, but that's ok. I'm also in the middle of reading OpenID Connect In Action. It seems ok, but rather dry so far. Maybe the subject material is just inherently a bit tedious and boring to me personally. Does anyone have any good posts or books they would recommend for getting a better grasp on some of the authentication protocols?
- mooreds 3y agoI always recommend these books/resources: * OAuth2 in action: https://www.manning.com/books/oauth-2-in-action https://www.manning.com/books/oauth-2-in-action which is great because it build an OAuth2 server in an accessible language, JavaScript * Solving identity in modern applications: https://link.springer.com/book/10.1007/978-1-4842-8261-8 https://link.springer.com/book/10.1007/978-1-4842-8261-8 which is dry but a great book about the modern identity lifecycle and an overview of the relevant protocols * I co-authored this ebook about the different modalities of OAuth: https://leanpub.com/themodernguidetooauth https://leanpub.com/themodernguidetooauth if you email me (email in profile), happy to get you a PDF for free * Security Engineering is great for some of the fundamentals, about hashing, for instance: https://www.cl.cam.ac.uk/~rja14/book.html https://www.cl.cam.ac.uk/~rja14/book.html (haven't finished it yet, though) Finally joining the OAuth mailing list is a great way to keep on top of the evolution of the protocols: https://www.ietf.org/mailman/listinfo/oauth https://www.ietf.org/mailman/listinfo/oauth
- tiptup300 3y agoThank you for these. Always enjoy book recommendations .