Safeguard your precious API endpoints built on FastAPI using OAuth 2.0

Semona Igama

Thursday 10:55 in Zeiss Plenary (Spectrum)

Audience Level: Beginners, Pythonistas who build on FastAPI who are not necessarily security experts but still need to deploy secure APIs.

History of OAuth 2.0? (3 mins)

  • Background/history on OAuth
  • Why do we need OAuth 2.0?

Authorization Challenge (2 mins)

  • Why implement secure authorization now rather than later?
  • Data sensitivity

OAuth 2.0 Overview (3 mins)

  • Core concepts
  • Key features: What are JWTs?
  • Benefits of using OAuth 2.0

Technical Implementation (4 mins)

  • Components of OAuth 2.0
  • Different types of authorization flows and use cases
  • API setup on FastAPI

Demo with FastAPI (12 mins)

  • Create an endpoint in FastAPI framework and secure it with OAuth 2.0
  • What are the different identity providers that can provide authorization?
  • Troubleshooting common issues

Best Practices (4 mins)

  • Industry-standard protocol
  • Token-based security
  • Should you build your authorization server?

Next Steps (2 mins)

  • Ability to integrate/provide SSO with various IdPs
  • Share resources to learn more including blogs, GitHub repo, etc.
  • Got questions? Connect with me!

Semona Igama

Semona is a Developer Advocate at Okta. She enjoys chatting about OpenID Connect, OAuth 2.0, and web security, but most of all, learning how developers learn best. Outside work, Semona is a Pythonista, loves kombucha, and plays board/role-playing games and Ultimate!