OAuth 2.0 Simplified
Aaron Parecki's free online book on OAuth 2.0: authorisation code flow with PKCE, access and refresh tokens, scopes, token introspection and how to build a server that issues tokens. Framework independent and far clearer than the RFCs, so it is the right place to learn what your auth library is doing.
Book
Web Development
Aaron Parecki (Okta)
Intermediate
Free
Aaron Parecki's free online book on OAuth 2.0: authorisation code flow with PKCE, access and refresh tokens, scopes, token introspection and how to build a server that issues tokens. Framework independent and far clearer than the RFCs, so it is the right place to learn what your auth library is doing.
Ready to start?
Opens on Aaron Parecki (Okta) in a new tab.
Stuck on something specific?
Writing only gets you so far. If you want an answer to your situation rather than the general case, book a session and we will work through it together. Sessions are free for approved Sefism members, and a few slots open each week.
Follow along
New writing, resources and project ideas land here first.