Integrating Web Services with OAuth and PHP

Author Matthew Frost

Release Date: 2016/02/01

ISBN: 9781940111308

Topic:

• Security

15
Chapters

0-1
Hours read

0k
Total Words

    Start Reading Now    
       Add to Wishlist       
View table of contents

Table of Contents

1. Dedication
2. Foreword
3. HTTP Basics
   1. The Problems with Authentication
   2. Breaking Down HTTP Requests/Responses
4. Introduction to OAuth
   1. Challenges of Authorization and Authentication
   2. Differences Between OAuth 1 and 2
   3. When Do I Need a Client/Server
   4. Solving Auth Challenges with OAuth
   5. Removing the Magic
   6. Using Existing Libraries is Good
   7. Decoupling Auth
5. OAuth 1 Client
   1. Components of an OAuth 1 Signature
   2. Understanding Tokens
   3. Understanding the Signature
   4. Understanding the Nonce
   5. Forming a Valid OAuth 1.0 Request
6. OAuth 1 Server
   1. Analyzing Request Components
   2. Verifying Signatures
   3. Distributing Tokens
   4. Handling Authentication Failures
   5. Handling Authorization Failures
   6. Summary
7. OAuth 1 Implementation
   1. Existing Libraries
   2. Frameworks
   3. Service Providers
   4. Summary
8. OAuth 2 Client
   1. Authorization Flow
   2. Scopes
   3. Grants
   4. Implicit Grant
   5. Resource Owner Password Credentials Grant
   6. Client Credential Grant
   7. Presenting the Access Token
9. OAuth 2 Server
   1. SSL/TLS
   2. Tokens and Grants
   3. Access Control
   4. Conclusion
10. OAuth 2 Implementation
    1. Existing Libraries
    2. Service Providers
    3. Conclusion
11. Security
    1. Application Security
    2. Social Engineering
    3. User IDs
    4. Token Expiration
    5. Conclusion
12. Credits