Skip to content
UdemyHackingPaid courseBeginner levelCertificate

OAuth 2.0: Nailed the core framework with hands dirty. (Udemy.com)

KeyCloak, Golang, React + Router + Bootstrap, Github’s OAuth. OAuth 2.0 RFCs

Created by: Charnnarong Chomthiang

Last updated June 2020

icon
What you will learn

  • Create a personal OAuth 2.0 playground in a virtual machine.
  • The fundamentals of the OAuth 2.0 framework.
  • Develop projects from scratch and secure them with OAuth 2.0
  • Attack your own projects
  • Apply some best practices like PKCE.
  • A touch on OpenID Connect.
  • Integrate our projects with Github’s OAuth application.

How it compares

Against the other 523 rated Udemy courses in Hacking on CourseDuck:

  • Rating4.5 out of 5higher than 51% of them
  • Reviews127#422 of 524 by number of reviews
  • Length6.1 hourslonger than 56% of them
  • Last updatedJune 2020earlier than 83% of them

icon
Course Description

In this course, we will start learning Oauth2 by using a production-ready Authorization Server such as Keycloak at the beginning. That sounds reasonable, but why do we do that?

By using a correct implementation authorization server at the beginning, it prevents us from going in the wrong way by ensuring that the authorization server complies with the Oauth 2.0 specification correctly. Besides, we can peacefully focus on how a client communicates with the authorization server in various different flows that are available and waiting for us to learn them and understand them. At the end of the day, it is less likely that one will use the Authorization server written from scratch for their production. And more importantly, we are focusing on fundamentals as our first priority. We wanted to divide the huge concept apart and conquer each small enough pieces that can be easily comprehended from the ground up.

Hence we offload what we haven’t focused yet to another piece of software we believe it implements correctly. Once we understand ins and outs all relevant theories, then our implementation will hardly go wrong if we really wanted to implement an Authentication server ourselves, In addition, the Authorization server is unarguably a complex system. So again, we won’t implement an authorization server in this course.

After we develop the OAuth 2.0 client and protected-resource. The protected resource will be a simple service that exposes APIs. Then we protected them with the Oauth2 framework. And with all solid understanding of the fundamental of how an authorization server behaves, plus the familiarity with RFC6749. Then we can at least implement a simple authorization server with joy.

Let’s imagine that, if this course was designed completely opposite direction, that is to guide you to start building the Authorization server at the beginning, it will draw a lot of energy from us. It will keep us juggling all OAuth's roles at once, and possibly take time to correct any mistakes that may occur from misunderstanding the concept and hence it could possibly take longer to achieve that same goal. That is why this course is carefully designed to deeply understand the Oauth 2.0 framework.

For more information and more specialty, please find my blog under my profile picture.

icon
Udemy Discount

The discount is applied through our link. Open the course from here and Udemy's current promotional price is applied at checkout on most courses, no code to type.

Some courses are excluded from Udemy's promotions. If the price does not drop, clear your browser cookies and use the button again.

icon
Instructor Details

Charnnarong Chomthiang

Learning is probably one of the most pleasant activities privileges to a human being. Most of us are doing it every day. However, when it comes to technologies these days, there are many things to learn out there, what if there is a faster way to achieve the same goal?


Hi, I am Charnnarong Chomthiang. I grew up among unanswered mysterious stories since I was a child. That made me love to demystify things around resiliently. And when I had a chance to know about Computer science. My destiny was discovered since then.


When finding a different perspective of the same thing becomes my second nature skill, I usually turn a result of that into smiling faces around by spreading new angles out to others.


To share that psychological moment even further, here I am. The place where I can release all my energy without holding it back.


For my professional background please find Linkedin under the profile picture.


icon
More Hacking courses

$109.99

$27.99

$14.99

$84.99

$15.99

$11.99

icon
Reviews

4.5

127 ratings on Udemy

Select a bar to show only those reviews.Select the bar again to show every rating.

By Konstantin Priluchnyi on 7/25/2023

Where is no resources or link to the source code for lessons. You should every time make pause to cope the code, some times it's not working and you can't compare it with some reference so you should rewatch all the lesson to find all code changes. The teacher do it really fast and you have no enough time to press Pause button to copy the code so you will press "Go back 5 second ago" button million times during the course.

By Sean on 4/12/2022

This was an excellent course, and did a great job of making a "dry" topic very interesting and fun. I came in with some basic ideas on OAuth2 already, but the course clarified a lot and I am a lot more confident with this knowledge now. The instructor has structured the course very well and takes a really hands-on approach: from setting up the Keycloak server to creating and adding clients which interact with different parts of OAuth and OIDC. It's all really well taught, covers a lot of ground and there are lots of relevant references and examples for when you want to go deeper. I went in aware that the English may not be clear but I didn't find it difficult to understand at all. To be honest I watched most of the course at 1.75x without issue. Aside from that there are excellent subtitles/captions available on every video too so it shouldn't be an issue. Thank you Charnnarong!

By Patanayont on 3/8/2022

เนื้อหาโดยรวมน่าสนใจและได้ประโยชน์ความรู้ตรงตามที่คาดหวังไว้ครับ เรื่อง accent เนื่องจากเป็นคนไทยก็เลยฟังพอเข้าใจอยู่ มี sub น่าจะช่วยคนต่างชาติได้เยอะ แต่จะขอ comment ในเรื่องตอน workshop code เพราะ ในคลิป จะเลื่อนไปเลื่อนมาตลอด เปลี่ยนหน้าไปมา บางช่วงก็จะเร่งเร็ว ก้มหน้าแปปนึงหันกลับมาอีกที ไม่รู้ไปใหนแล้ว เวลาทำตาม เลยต้องย้อนไปย้อนมาหลายรอบครับ

By Griep Marco on 10/26/2021

Totally helped my to implement my oauth2 application with full understanding whats going on. I was also able to transfer this knowledge to .net core and vuejs. Thanks and well done.

By Volker Koster on 11/21/2020

Super course. It really goes deep and teaches me the stuff I want to know. It also sets up a perfect playground for taking this further and experimenting myself. This is no course for just watching - you have to actively follow along. But this is definitely worth the effort.

By Saad Guessous on 9/6/2020

First of all, a big thank you to Charnnarong for making this fantastic course... I've been looking for a similar course on Keycloak for a long time but to no avail, until recently ;) The course is definitely aimed towards experienced developers (basic working knowledge of web development is assumed) but is structured and explained in such a way, that even a Golang noob as myself is able to follow along (I am actually looking into rewriting the backend in Clojure...) I am learning OAuth2, Keycloak, Golang and more, all in one package! Amazing stuff! Keep up the good work and many thanks for sharing your knowledge! PS: For those worrying about the lecturers accent, you can always turn the captions on. This stuff is golden and you don't want to miss out!!!

By Vincent Yin on 7/13/2020

The hands-on part is super! And the switching back-and-forth between custom code and Postman gives an extra perspective in understanding the protocol. It is so much clearer than many other courses which often rely on PowerPoint slides to regurgitate the RFC specification. Tip: As a student, turn on the caption/subtitle of the video if you cannot make out the exact spoken words in the audio.

By Eden Halil on 6/4/2020

The pace is great as I feel like I'm really absorbing what is being taught, and I like how the instructor goes in to detail about the tool he's using i.e. Vagrant or go (even though he'll stop and say that he's rambling on too much, I like the extra detail).

By Yabin Monroy on 6/3/2020

the topics and examples are very well explained, definitely this is not a course for beginners. If you really want to learn security this a very good course to crash in real world situations.

By Joris Kalz on 1/19/2020

The content is very great and it really helps me to understand the concepts of oauth. However I am not a native english speaker and his english accent is very hard to understand for me. I am now using the closed captioning and I am able to follow much better. Thank you very much!

Showing all 10 reviews on CourseDuck

Read all 127 reviews on Udemy

icon
Quality Score

No CourseDuck member has rated this course yet. Taken it? Give each part a thumbs up or down.

Content Quality
/
Video Quality
/
Qualified Instructor
/
Course Pace
/
Course Depth & Coverage
/

Overall Score : 90 / 100