OAuth 2.0 & OIDC Security — The Authorization Staircase

A hands-on mid-level course that implements OAuth 2.0 and OpenID Connect securely. Climb the authorization staircase - eight steps: Flows, Clients, Tokens, Scopes, Validate, Sessions, Federate, and Revoke - choosing the right flow with PKCE, validating JWTs correctly, and closing the misconfigurations that break auth. Strictly defensive. Four hands-on activities in every lesson.

What you'll learn

• Choose the right OAuth flow and use PKCE correctly.
• Register clients safely and handle tokens without leaking them.
• Validate JWTs (signature, aud, iss, exp) and scope access least-privilege.
• Manage sessions, federation, and revocation securely.

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.