HACKER Q&A
📣 chirau

Recommendations for a comprehensive and deep guide to OAuth?


Hi,

I am looking for a super comprehensive guide to OAuth. It can be a book, a course, a series, whatever resource it is.

I know most will suggest looking at the documentation. Unfortunately, that is not my best style of learning. And to be honest, I feel like I wouldn't know where to start with the docs if I do not have a great idea of the workflows, resources and terminologies.

I have a working knowledge, the base stuff you learn from Udemy. Basically generating tokens and then making requests blah blah.

I want to go deeper than that. I want to understand the underpinnings of Authorization Servers, transport layers and protocols, sessions, management, servers etc.

I want to get to a point where I could actually architect (high level) my own Identity Provider. Not that I want to do it, maybe I do, but that is how deep I want to master OAuth.

I want to eventually be able to take something like Ory Hydra, break it and customize it to my own liking. I believe this would take more than just understanding what a token or JWT is.

So any advice would be dearly appreciated.


  👤 lovelearning Accepted Answer ✓
When I was investigating it a few years ago, I found Auth0's videos very useful to understand concepts and their relationships. https://auth0.com/docs/videos/learn-identity-series