{"id":16683,"date":"2024-04-11T02:00:39","date_gmt":"2024-04-11T09:00:39","guid":{"rendered":"https:\/\/softwareengineeringdaily.com\/?p=16683"},"modified":"2024-09-17T06:57:54","modified_gmt":"2024-09-17T13:57:54","slug":"authlete-and-making-oauth-accessible-with-justin-richer","status":"publish","type":"post","link":"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/","title":{"rendered":"Authlete and Making OAuth Accessible with Justin Richer"},"content":{"rendered":"
\n

OAuth is an open standard for access delegation. It lets users grant websites or applications access to their information on other websites, but without giving away passwords.<\/p>\n<\/div>\n

\n

OpenID Connect is an identity layer on top of OAuth. Even if you haven’t programmed using OAuth and OpenID Connect, you\u2019ve certainly used them for authentication on Google, Facebook, Spotify, and countless other services.<\/p>\n<\/div>\n

\n

Authlete<\/a> is a service that provides a set of APIs to implement OAuth authorization servers, and OpenID Connect identity providers.<\/p>\n<\/div>\n

\n

Justin Richer<\/a> is the Principal Architect at Authlete<\/a> and is part of the working group that developed OAuth 2.0. He joins the podcast to talk about the history of OAuth, OAuth as a delegation protocol, the Authlete API, and much more.<\/p>\n<\/div>\n

\n

Check out https:\/\/events.authlete.com\/sed<\/a> to try out Authlete for an extended 90-day free trial.<\/p>\n

Full Disclosure: This episode is sponsored by Authlete.<\/em><\/p>\n<\/div>\n

\n

\"\"\"\"<\/a>Gregor Vand is a security-focused technologist, and is the founder and CTO of Mailpass. Previously, Gregor was a CTO across cybersecurity, cyber insurance and general software engineering companies. He has been based in Asia Pacific for almost a decade and can be found via his profile at vand.hk.<\/span><\/span><\/p>\n

 <\/p>\n

\n
\n
\n

Please click here to see the transcript of this episode.<\/a><\/p>\n<\/div>\n

\n

Sponsorship inquiries: sponsor@softwareengineeringdaily.com<\/a><\/p>\n<\/div>\n<\/div>\n<\/div>\n

 <\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

OAuth is an open standard for access delegation. It lets users grant websites or applications access to their information on other websites, but without giving away passwords. OpenID Connect is an identity layer on top of OAuth. Even if you haven’t programmed using OAuth and OpenID Connect, you\u2019ve certainly used them for authentication on Google,<\/p>\n","protected":false},"author":94,"featured_media":16684,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"Authlete and Making OAuth Accessible with Justin Richer @justin__richer @authlete","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[1363,2143,5933,5755,14,1083],"tags":[6144,6143,6141,6142],"class_list":["post-16683","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-all-episodes","category-exclusive-content","category-gregor-vand","category-hosts","category-podcast","category-security","tag-delegation-protocol","tag-justin-richer","tag-oauth","tag-openid-connect"],"jetpack_publicize_connections":[],"acf":[],"yoast_head":"\nAuthlete and Making OAuth Accessible with Justin Richer - Software Engineering Daily<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Authlete and Making OAuth Accessible with Justin Richer - Software Engineering Daily\" \/>\n<meta property=\"og:description\" content=\"OAuth is an open standard for access delegation. It lets users grant websites or applications access to their information on other websites, but without giving away passwords. OpenID Connect is an identity layer on top of OAuth. Even if you haven’t programmed using OAuth and OpenID Connect, you\u2019ve certainly used them for authentication on Google,\" \/>\n<meta property=\"og:url\" content=\"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/\" \/>\n<meta property=\"og:site_name\" content=\"Software Engineering Daily\" \/>\n<meta property=\"article:published_time\" content=\"2024-04-11T09:00:39+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-09-17T13:57:54+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/softwareengineeringdaily.com\/wp-content\/uploads\/2024\/03\/WP-Authlete-and-Making-OAuth-Accessible-with-Justin-Richer.png\" \/>\n\t<meta property=\"og:image:width\" content=\"600\" \/>\n\t<meta property=\"og:image:height\" content=\"315\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"SEDaily\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@software_daily\" \/>\n<meta name=\"twitter:site\" content=\"@software_daily\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"SEDaily\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/\"},\"author\":{\"name\":\"SEDaily\",\"@id\":\"https:\/\/softwareengineeringdaily.com\/#\/schema\/person\/f1a6631864960c74ef79dae73df8984c\"},\"headline\":\"Authlete and Making OAuth Accessible with Justin Richer\",\"datePublished\":\"2024-04-11T09:00:39+00:00\",\"dateModified\":\"2024-09-17T13:57:54+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/\"},\"wordCount\":222,\"publisher\":{\"@id\":\"https:\/\/softwareengineeringdaily.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/i0.wp.com\/softwareengineeringdaily.com\/wp-content\/uploads\/2024\/03\/WP-Authlete-and-Making-OAuth-Accessible-with-Justin-Richer.png?fit=600%2C315&ssl=1\",\"keywords\":[\"delegation protocol\",\"Justin Richer\",\"OAuth\",\"OpenID Connect\"],\"articleSection\":[\"All Content\",\"Exclusive Content\",\"Gregor Vand\",\"Hosts\",\"Podcast\",\"Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/\",\"url\":\"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/\",\"name\":\"Authlete and Making OAuth Accessible with Justin Richer - Software Engineering Daily\",\"isPartOf\":{\"@id\":\"https:\/\/softwareengineeringdaily.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/i0.wp.com\/softwareengineeringdaily.com\/wp-content\/uploads\/2024\/03\/WP-Authlete-and-Making-OAuth-Accessible-with-Justin-Richer.png?fit=600%2C315&ssl=1\",\"datePublished\":\"2024-04-11T09:00:39+00:00\",\"dateModified\":\"2024-09-17T13:57:54+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/#primaryimage\",\"url\":\"https:\/\/i0.wp.com\/softwareengineeringdaily.com\/wp-content\/uploads\/2024\/03\/WP-Authlete-and-Making-OAuth-Accessible-with-Justin-Richer.png?fit=600%2C315&ssl=1\",\"contentUrl\":\"https:\/\/i0.wp.com\/softwareengineeringdaily.com\/wp-content\/uploads\/2024\/03\/WP-Authlete-and-Making-OAuth-Accessible-with-Justin-Richer.png?fit=600%2C315&ssl=1\",\"width\":600,\"height\":315},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/softwareengineeringdaily.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Authlete and Making OAuth Accessible with Justin Richer\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/softwareengineeringdaily.com\/#website\",\"url\":\"https:\/\/softwareengineeringdaily.com\/\",\"name\":\"Software Engineering Daily\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/softwareengineeringdaily.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/softwareengineeringdaily.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/softwareengineeringdaily.com\/#organization\",\"name\":\"Software Engineering Daily\",\"url\":\"https:\/\/softwareengineeringdaily.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/softwareengineeringdaily.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/i0.wp.com\/softwareengineeringdaily.com\/wp-content\/uploads\/2024\/01\/cropped-sed_website_banner.png?fit=549%2C169&ssl=1\",\"contentUrl\":\"https:\/\/i0.wp.com\/softwareengineeringdaily.com\/wp-content\/uploads\/2024\/01\/cropped-sed_website_banner.png?fit=549%2C169&ssl=1\",\"width\":549,\"height\":169,\"caption\":\"Software Engineering Daily\"},\"image\":{\"@id\":\"https:\/\/softwareengineeringdaily.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/software_daily\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/softwareengineeringdaily.com\/#\/schema\/person\/f1a6631864960c74ef79dae73df8984c\",\"name\":\"SEDaily\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/softwareengineeringdaily.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/96a9ce2f21db7050dc801bc0505cb90b?s=96&d=retro&r=pg\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/96a9ce2f21db7050dc801bc0505cb90b?s=96&d=retro&r=pg\",\"caption\":\"SEDaily\"},\"url\":\"https:\/\/softwareengineeringdaily.com\/author\/sed-production\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Authlete and Making OAuth Accessible with Justin Richer - Software Engineering Daily","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/","og_locale":"en_US","og_type":"article","og_title":"Authlete and Making OAuth Accessible with Justin Richer - Software Engineering Daily","og_description":"OAuth is an open standard for access delegation. It lets users grant websites or applications access to their information on other websites, but without giving away passwords. OpenID Connect is an identity layer on top of OAuth. Even if you haven’t programmed using OAuth and OpenID Connect, you\u2019ve certainly used them for authentication on Google,","og_url":"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/","og_site_name":"Software Engineering Daily","article_published_time":"2024-04-11T09:00:39+00:00","article_modified_time":"2024-09-17T13:57:54+00:00","og_image":[{"width":600,"height":315,"url":"http:\/\/softwareengineeringdaily.com\/wp-content\/uploads\/2024\/03\/WP-Authlete-and-Making-OAuth-Accessible-with-Justin-Richer.png","type":"image\/png"}],"author":"SEDaily","twitter_card":"summary_large_image","twitter_creator":"@software_daily","twitter_site":"@software_daily","twitter_misc":{"Written by":"SEDaily","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/#article","isPartOf":{"@id":"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/"},"author":{"name":"SEDaily","@id":"https:\/\/softwareengineeringdaily.com\/#\/schema\/person\/f1a6631864960c74ef79dae73df8984c"},"headline":"Authlete and Making OAuth Accessible with Justin Richer","datePublished":"2024-04-11T09:00:39+00:00","dateModified":"2024-09-17T13:57:54+00:00","mainEntityOfPage":{"@id":"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/"},"wordCount":222,"publisher":{"@id":"https:\/\/softwareengineeringdaily.com\/#organization"},"image":{"@id":"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/softwareengineeringdaily.com\/wp-content\/uploads\/2024\/03\/WP-Authlete-and-Making-OAuth-Accessible-with-Justin-Richer.png?fit=600%2C315&ssl=1","keywords":["delegation protocol","Justin Richer","OAuth","OpenID Connect"],"articleSection":["All Content","Exclusive Content","Gregor Vand","Hosts","Podcast","Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/","url":"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/","name":"Authlete and Making OAuth Accessible with Justin Richer - Software Engineering Daily","isPartOf":{"@id":"https:\/\/softwareengineeringdaily.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/#primaryimage"},"image":{"@id":"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/softwareengineeringdaily.com\/wp-content\/uploads\/2024\/03\/WP-Authlete-and-Making-OAuth-Accessible-with-Justin-Richer.png?fit=600%2C315&ssl=1","datePublished":"2024-04-11T09:00:39+00:00","dateModified":"2024-09-17T13:57:54+00:00","breadcrumb":{"@id":"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/#primaryimage","url":"https:\/\/i0.wp.com\/softwareengineeringdaily.com\/wp-content\/uploads\/2024\/03\/WP-Authlete-and-Making-OAuth-Accessible-with-Justin-Richer.png?fit=600%2C315&ssl=1","contentUrl":"https:\/\/i0.wp.com\/softwareengineeringdaily.com\/wp-content\/uploads\/2024\/03\/WP-Authlete-and-Making-OAuth-Accessible-with-Justin-Richer.png?fit=600%2C315&ssl=1","width":600,"height":315},{"@type":"BreadcrumbList","@id":"https:\/\/softwareengineeringdaily.com\/2024\/04\/11\/authlete-and-making-oauth-accessible-with-justin-richer\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/softwareengineeringdaily.com\/"},{"@type":"ListItem","position":2,"name":"Authlete and Making OAuth Accessible with Justin Richer"}]},{"@type":"WebSite","@id":"https:\/\/softwareengineeringdaily.com\/#website","url":"https:\/\/softwareengineeringdaily.com\/","name":"Software Engineering Daily","description":"","publisher":{"@id":"https:\/\/softwareengineeringdaily.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/softwareengineeringdaily.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/softwareengineeringdaily.com\/#organization","name":"Software Engineering Daily","url":"https:\/\/softwareengineeringdaily.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/softwareengineeringdaily.com\/#\/schema\/logo\/image\/","url":"https:\/\/i0.wp.com\/softwareengineeringdaily.com\/wp-content\/uploads\/2024\/01\/cropped-sed_website_banner.png?fit=549%2C169&ssl=1","contentUrl":"https:\/\/i0.wp.com\/softwareengineeringdaily.com\/wp-content\/uploads\/2024\/01\/cropped-sed_website_banner.png?fit=549%2C169&ssl=1","width":549,"height":169,"caption":"Software Engineering Daily"},"image":{"@id":"https:\/\/softwareengineeringdaily.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/software_daily"]},{"@type":"Person","@id":"https:\/\/softwareengineeringdaily.com\/#\/schema\/person\/f1a6631864960c74ef79dae73df8984c","name":"SEDaily","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/softwareengineeringdaily.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/96a9ce2f21db7050dc801bc0505cb90b?s=96&d=retro&r=pg","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/96a9ce2f21db7050dc801bc0505cb90b?s=96&d=retro&r=pg","caption":"SEDaily"},"url":"https:\/\/softwareengineeringdaily.com\/author\/sed-production\/"}]}},"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/i0.wp.com\/softwareengineeringdaily.com\/wp-content\/uploads\/2024\/03\/WP-Authlete-and-Making-OAuth-Accessible-with-Justin-Richer.png?fit=600%2C315&ssl=1","jetpack_shortlink":"https:\/\/wp.me\/p7GuoD-4l5","_links":{"self":[{"href":"https:\/\/softwareengineeringdaily.com\/wp-json\/wp\/v2\/posts\/16683"}],"collection":[{"href":"https:\/\/softwareengineeringdaily.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/softwareengineeringdaily.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/softwareengineeringdaily.com\/wp-json\/wp\/v2\/users\/94"}],"replies":[{"embeddable":true,"href":"https:\/\/softwareengineeringdaily.com\/wp-json\/wp\/v2\/comments?post=16683"}],"version-history":[{"count":0,"href":"https:\/\/softwareengineeringdaily.com\/wp-json\/wp\/v2\/posts\/16683\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/softwareengineeringdaily.com\/wp-json\/wp\/v2\/media\/16684"}],"wp:attachment":[{"href":"https:\/\/softwareengineeringdaily.com\/wp-json\/wp\/v2\/media?parent=16683"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/softwareengineeringdaily.com\/wp-json\/wp\/v2\/categories?post=16683"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/softwareengineeringdaily.com\/wp-json\/wp\/v2\/tags?post=16683"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}