Session: Enhancing Security and Efficiency with OAuth for Authentication and Authorization
In today's interconnected digital landscape, securing user data and managing access control are of paramount importance. OAuth (Open Authorization) has emerged as a robust framework that provides a seamless and secure method for token-based authentication and authorization. This presentation will delve into the core principles and mechanisms of OAuth, exploring its evolution from OAuth 1.0 to the more advanced OAuth 2.0 protocol. We will examine the practical applications of OAuth in enabling third-party access without compromising user credentials, and discuss best practices for implementing OAuth in various contexts, such as web and mobile applications. Attendees will gain a comprehensive understanding of the OAuth flow, including the roles of resource owners, clients, and authorization servers, and learn how to effectively leverage OAuth to enhance security and efficiency in their systems. Through real-world examples and case studies, this session will highlight the strengths and potential challenges of OAuth, empowering developers and security professionals to make informed decisions in their authentication and authorization strategies.
Bio
I have over a decade of experience as a software professional specializing in authentication and authorization. Currently, I work as a Senior Software Engineer at Microsoft in the Azure cloud space. I am passionate about advocating for women in tech and contributing to the OAuth community