Hacker News Reader

Are you implementing OAuth 2 or interested in learning more? I would highly recommend combing through the OAuth 2.1 spec [1] as it incorporates the “best practices” that were added to 2.0 through additional RFCs.

[1] https://tools.ietf.org/html/draft-ietf-oauth-v2-1-00

View on HN

And here's a decent intro that de-mystifies things for those who feel very confused: https://youtu.be/996OiexHze0

This was for me to get the concepts clear and learn how the OAuth2 flows work. Definitely will check out the link you shared.

Reply on news.ycombinator.com