Oauth2 JWT Interview Questions and Answers | Grant types, Scope, Access Token, Claims | Code Decode

In this video of code decode we have explained oauth 2.0 and JWT along with Interview questions and answers
Udemy Course of Code Decode on Microservice k8s AWS CICD link:
openinapp.co/udemycourse
Course Description Video :
yt.openinapp.co/dmjvd
Checkout Next Level By Unacademy nxtlvl.in/dctw
What Is OAuth All about?
It’s an open standard Or A Protocol for authorization .
Security -
Authentication - Who u are?
Authorization - What do u want ?
OAuth 2 is an authorization framework that enables applications - such as Facebook, Twitter- to obtain limited access to user accounts on an HTTP service.
It works by delegating user authentication to the service that hosts a user account and authorizing third-party applications to access that user account.
OAuth 2 provides authorization flows and not the authentication.
There are two versions of OAuth: OAuth 1.0a and OAuth 2.0. These specifications are completely different from one another, and cannot be used together: there is no backwards compatibility between them. OAuth 2.0 is the most widely used form of OAuth
How Oauth 2.0 works?
The application requests authorization to access service resources from the user
If the user authorized the request, the application receives an authorization grant
The application requests an access token from the authorization server (API) by presenting authentication of its own identity, and the authorization grant
If the application identity is authenticated and the authorization grant is valid, the authorization server (API) issues an access token to the application. Authorization is complete.
The application requests the resource from the resource server (API) and presents the access token for authentication
If the access token is valid, the resource server (API) serves the resource to the application
It is designed primarily as a means of granting access to a set of resources, for example, remote APIs or user data.
What are Scopes and Tokens?
Scopes and tokens are how OAuth implements granular access controls.
Together they represent a “permission to do something.” The token is the “permission” part and the scope defines what the “do something” is.
Think of a movie ticket: the scope is the name of the movie you are authorized to watch and the ticket itself is the token, which only a theater employee can validate as authenticate. Also tokens have expiration date. Similar to movie time written on movies ticket.
Access token also have scope information
There are four types of scopes:
Read Access
Write Access
Read and Write Access
No Access
What are grants?
Application grant types (or flows) are methods through which applications can gain Access Tokens and by which you grant limited access to your resources to another entity without exposing credentials.
Taking an example of movie ticket booking. You can get access to movie tickets by 2 ways
Walkin to theater and purchase from window
book online
These are 2 grants or flows. The method you’ve chosen dictates what you will do to obtain the ticket.
Similar is Grant types - ways to obtain access token
Oauth2 provides following Grants -
Client Credentials - Used for non-interactive applications e.g., automated processes, microservices, etc. In this case, the application is authenticated per se by using its client id and secret
Authorization Code - The Authorization Code flow might be used by Single Page Apps (SPA) like Angular applications. In such SPA, the client secret cannot be stored securely, and so authentication, during the exchange, is limited to the use of client id alone
Most Asked Core Java Interview Questions and Answers: • Core Java frequently a...
Advance Java Interview Questions and Answers: • Advance Java Interview...
Java 8 Interview Questions and Answers: • Java 8 Interview Quest...
Hibernate Interview Questions and Answers:
• Hibernate Interview Qu...
Spring Boot Interview Questions and Answers:
• Advance Java Interview...
Angular Playlist: • Angular Course Introdu...
SQL Playlist: • SQL Interview Question...
GIT: • GIT
Subscriber and Follow Code Decode
Subscriber Code Decode: th-cam.com/users/CodeDecode?...
LinkedIn : / codedecodeyoutube
Instagram: / codedecode25
#codedecode #intuit #tcs

[@arpitsik4649]

We asked you delivered. Thats code decode for you all❤️💯

[@CodeDecode]

Thanks Arpit 🙂🙂🙏🙏

[@mitsixty4011]

@@CodeDecode hello Ma'am, I have a question, is spring security and auth2 same, can we use anyone of these for the security of application, can I say spring security instead of auth2

[@lifeistooshort-alwaysbehappy]

Truly You are an soldier who is helping many candidates in cracking their tech interviews and what I am today is because of your videos only.. Heartily Thanks a lot for your efforts and help .. Take care of your health and keep rocking ✨

[@CodeDecode]

Thanks a lot Naveen for such a beautiful comment. It made my day🙂🙂. It's your hardwork n dedication to learn which uplifted you Man 👏👏. Great job 💯👍👍👍👍keep learning keep shining Man 🎉🎉

[@karthickkumar653]

Very good and clear explanation on OAuth. Keep up the good work and provide the next version of this with code.

[@mayureshkumbhar5355]

I am eagerly waiting for this series to complete, please keep up the good work 👍👍👍

[@CodeDecode]

Sure Mayuresh 👍👍

[@rahulshukla7883]

Thanks , Well explained and covered most of the okta and oauth2 parts in a single video 👏

[@CodeDecode]

Thanks Rahul 🙂

[@chandrachurdafadar6809]

Awesome demonstration of such complex architectures, thank you Code decode *\/*

[@CodeDecode]

You're welcome

[@emmanuelgeorge1750]

Thank you so much for sharing your knowledge. Your way of explanation is very clear, understandable and engaging. Every video you make is just awesome. You deserve a 1 million subscribers.👏👏👏👏👏👏

[@CodeDecode]

Thanks a ton😊😊❤️❤️

[@rakeshkachhadiya]

Well explained again. Waiting for OKTa and jwt decoding from server side. Thank you for bringing super valuable session

[@CodeDecode]

Sure Raakesh 👍

[@SenthilRajaM-se7rt]

Simply Awesome and mind blowing, great effort!!! Keep Rocking!!!

[@CodeDecode]

Thanks a lot🙂🙂

[@swaruppal679]

I would like to take this opportunity to thank you very much as your content has helped me a lot in getting job in one my dream company. You have explained the concepts in an excellent way. Keep up the good work all the best!!

[@CodeDecode]

😊😊 many many congratulations Swaruppal

[@samsonrj5628]

Great OAuth tutorial and explanation. Thank you.

[@CodeDecode]

Glad it was helpful!

[@KamleshKumar-rj4re]

very good explaination and very helpful video for interview..... Thankyou mam

[@152aliraza]

Thank you so much for explaining, you are doing a great job.

[@CodeDecode]

Thanks for appreciating

[@vishaldhamde2013]

That's very much in detail explanation. It would be helpful if you can explain and walk us through how to implement the coding part of it.

[@CodeDecode]

Sure Vishal 👍👍

[@DiegoFernandoRuizS]

Just awesome ❤ I really appreciate your explanation… 🙏🙏🙏 thanks

[@CodeDecode]

You're welcome

[@Amarsri19]

After Durga Mata and Kali Mata , you are the my Java Mata :).Thanks from bottom of my heart for the dedication you put in the explanation.

[@CodeDecode]

😂Thanks ❤️

[@codeloverAthu]

Thanks mam for your continuous effort, your explanations are crystal clear and easy to understand. You are really a gem, thanks a ton ❤ God bless you all 🙏

[@CodeDecode]

Thanks 🙏👍👍

[@indlasubramanyam8766]

Thank you sis. No words to say 💕

[@CodeDecode]

Thanks 🙏🙂🙂🙂

[@bharukeerthi1986]

Thanks. Very good explanation 🙏. And please make code walkthrough for this topic

[@CodeDecode]

Sure Keerthi 🙂👍

[@vinodkarathiyaofficial]

Very Good Explanation Mam 🙌🏼

[@CodeDecode]

Thanks Vinod 🙂👍

[@truthreveal6521]

Great . It would be very beneficial if u make a small spring boot application with outh plz

[@CodeDecode]

Sure we will do that👍

[@jainamdesai4230]

Thanks...very good explanation 👍👍💯

[@CodeDecode]

Thanks Jainam 👍👍

[@yuvrajsinghpanwar9699]

Just awesome 🎉

[@mrudulaalgam5864]

Thank you for this wonderful vide, please create implementation video as well.

[@CodeDecode]

sure we will create it soon

[@shinchannohara1097]

Bro u save lives🙇

[@CodeDecode]

😁😁

[@arjun9059]

You are Awesome and great explanation and take care

[@CodeDecode]

Thanks

[@cdcaiza]

muy buena explicacion

[@CodeDecode]

Thanks 🙂🙂

[@jayalaxmirn9820]

Awesome explaination. Can you please make video on OIDC using spring boot

[@CodeDecode]

Sure 👍

[@sachida23]

Thanks and great explanation ! Could you please spring security with Spring boot application with configuration with OKTA, Thank you.

[@CodeDecode]

Sure

[@pallabdutta2007]

very satisfied

[@murarkar-srikanth]

it is very useful video.Pls do a video on spring boot with okta thanks

[@CodeDecode]

sure we will create it soon

[@muhassinmusthafa3379]

Waiting for the day when u have a minimum 1M subscribers

[@CodeDecode]

😊😊 means a lot to us 🙏🙏

[@aditisingh6330]

Please make part 3 complete videos on claims also 😊

[@CodeDecode]

Sure we will create it soon

[@sudheerkumar-tp1mg]

You are really great madam, 💖.

[@CodeDecode]

Thanks Sudheer 🙂🙂

[@sudheerkumar-tp1mg]

I am always follow your site for interview questions and everything. Thanks is a very small word for your efforts madam.

[@CodeDecode]

Hope you land at your dream job Sudheer. Keep learning keep Rocking Man 👍👍🙂🙂

[@rahulchakrabarti7475]

Can you please make the implementation video for oauth2 whatever you discussed?

[@nurzamalislam177]

Yes implementation is very important

[@CodeDecode]

Sure Rahul. It's in pipeline 👍👍

[@CodeDecode]

So true 👍👍. Sure we will put video on that

[@GAneshStudyGAng]

Yes pls do

[@CodeDecode]

Sure Ganesh 👍

[@phanimadhuri4087]

Where does the client app or browser saves this jwt token

[@Vithal_Nivargi]

Hi Mam,
Please implement Oauth 2 and JWT in spring boot application once because it's difficult to understand theory.
Thank you 😊

[@arunkumarp.r.6870]

Thanks. Please create code implementation video.

[@CodeDecode]

sure we will create it soon

[@saumilwaghela4543]

Do make video on OIDC

[@CodeDecode]

Sure Saumil 👍👍

[@HariKrishnan-ff4hf]

OAuth1 is deprecated ,But why we moved to oAuth 2 ?, what is the difference between OAuth 1 and OAuth2 ?

[@schaugala4017]

Please give the PDF link for the notes which you are referring to while teaching

[@CodeDecode]

Hey, I have referred multiple blogs sites .it's Not from one place. You can find every thing in description bar below 👍👍happy learning👍

[@lakshmipriyaalagiyamanaval3059]

Please post a code walkthrough for the same...we are waiting

[@CodeDecode]

Sure LakshmiPriya 👍🙂

[@jammulaiahp5256]

Pls make next video with okta, oath2

[@CodeDecode]

sure we will create it soon

[@chandrasekhar4489]

Please create video for implementation

[@CodeDecode]

Sure Chandra we will create it soon

[@sandysworld7529]

Please Mam make a implementation video on oatuh2 and okta

[@CodeDecode]

Sure, we will try to incorporate your video in this week . 👍

[@rishiraj2548]

🙏🙏👍

[@CodeDecode]

🙂🙂

[@cheruvupallianusha]

Please cover coding part for OAuth

[@CodeDecode]

Sure Anusha👍👍

[@poojavishnupurikar9367]

Yes please cover coding part for okta for spring/spring boot project

[@bharukeerthi1986]

Please create video for oidc

[@CodeDecode]

Sure we will create a video on that soon 👍🙂