OAuth 2.0 Integration Setup
Set up OAuth 2.0 authentication with authorization URL generation, token handling, and state parameter security.
何时使用此配方
Implement 'Sign in with Google/GitHub/Microsoft' in your web app. OAuth 2.0 is the industry standard for delegated authorization and social login.
步骤
常见问题
What's the difference between OAuth 2.0 and OpenID Connect?
OAuth 2.0 handles authorization (access to resources). OpenID Connect adds an identity layer on top (who the user is). For login, you want OIDC which includes OAuth 2.0.
Why is the state parameter important?
The state parameter prevents CSRF attacks. Without it, an attacker could trick users into connecting the attacker's account. Always validate state on callback.
相关配方
Secure Password Workflow
Generate a strong password, verify its strength, and hash it for storage — a complete password security pipeline.
Web Security Header Audit
Audit your website's security headers, generate a CSP policy, evaluate it, and configure CORS.
JWT Authentication Setup
Set up JWT-based authentication: generate tokens, create signing keys, and implement TOTP for 2FA.
API Security Hardening
Harden your API with HMAC request signing, secure secrets, and SRI for client-side integrity.