Authentication & Authorization: OAuth
About this Course
As a Python programmer, leveraging Flask allows you to quickly and easily build your own web applications. But before you share your apps on the Internet you should protect your users' data, ensuring information stored on your site is safe from unwanted manipulation. You could implement web security and permissions on your own, but relying on trusted providers is a faster, safer, and easier way to allow users to login to your …
Authentication & Authorization: OAuth
About this Course
As a Python programmer, leveraging Flask allows you to quickly and easily build your own web applications. But before you share your apps on the Internet you should protect your users' data, ensuring information stored on your site is safe from unwanted manipulation. You could implement web security and permissions on your own, but relying on trusted providers is a faster, safer, and easier way to allow users to login to your application - without having to create and maintain another account, profile, and password.
In this course, you will learn to implement the OAuth 2.0 framework to allow users to securely login to your web applications. You'll be provided a restaurant menu application created in Flask. By the end of this course, you will write the necessary code to implement Google+ Sign-In and Facebook Login in options so users can create restaurant menus that are viewable by everyone but only modifiable by the original creator.
Learn to implement the OAuth 2.0 framework to allow users to securely and easily login to your web applications.
[
OAuth 2.0 is a popular framework that allows users to login to your web application by using third party sign ins, from providers they’ve already created and trust, with the click of a button. And because passwords and sensitive data are never sent, your web application does not have to deal with the complexities of secure password storage and security breaches. Your users can then control the level of access your application has to their data, and change or revoke this access at any point in time.
]
lesson 1
Authentication vs. Authorization
Learn the difference between authentication and authorization.
Learn how OAuth 2.0 makes implementing security easier for developers and users.
See OAuth 2.0 in action as you make API requests using Google’s OAuth 2.0 Playground.
lesson 2
Creating a Google+ Sign-In
Learn about the different types of security flows your application can implement.
See how security can be handled by your server and your user’s browser.
Add a Google+ Sign-In to an existing web application and implement a hybridized client/server flow.
lesson 3
Local Permission Systems
Add python code to create server-side rules that will constitute a permission system.
Limit access of the database for each logged in user based on how the developer designs this code.
Add a User model model to your database to store the credentials collected from the OAuth provider’s API.
lesson 4
Adding Facebook & Other Providers
Learn to implement multiple OAuth providers on your web application.
Add Facebook Login as an alternative sign in option for your users.
Understand how to use OAuth provider documentation to add as many providers as you see fit.
