Modern Authentication for web apps with Identity Server
Just a week after Global Azure Boot Camp, we had Null Hyderabad security meet and I was supposed to give a talk. I planned to repeat the Modern web authentication scenarios talk which I have presented at the Azure boot camp. But to satisfy my technical side, here is what I have done:
I could have made my job easy by running the same slides, but I have set a personal challenge of rewriting the demos using [Identity Server](https://identityserver.github.io/Documentation/), instead of [Azure AD](https://azure.microsoft.com/en-in/documentation/articles/active-directory-authentication-scenarios/) as the identity provider. The result - I have learnt some of the low-level implementation details of OpenIdConnect and OAuth 2.0 protocols by playing around with IdentityServer APIs.I have presented this last week at #mughazure using @azuread. For fun I'm rebuilding the demos using @IdentityServer ;) @nullhyd @mughtwits
— Krishna Chaitanya T (@novogeek) April 21, 2016
Here are the slides of my talk:
I have hinted Null Hyderabad core team that I would take longer that the usual time and here is how it ended up :)
Enjoyed presenting at @nullhyd meet today. Touched the basics of OAuth 2.0 & OpenIdConnect. Good audience..it went for 2.5 hrs!
— Krishna Chaitanya T (@novogeek) April 23, 2016
One of the highlights of the meet was a talk by a 10+1 student! See how smart the next gen kids are turning out to be! I haven't switched on a computer till I was in the 2nd year of my Bachelor's degree and today we have a student doing a security talk in an open security community. I hope this will be an inspiration not only to rest of the college kids but also to working professionals who while away their time.
A 10+1 student is presenting at null hyd.. His dad accompanied him to meet. @nullhyd @null0x00 pic.twitter.com/A3Wdr3CLd5
— Hari (@vhssunny1) April 23, 2016
On another note, Raghunath, one of the co-founders of NULL Hyderabad and the backbone of the community since its inception, was leaving Hyderabad. While we are happy that he is moving abroad for a much bigger goal, we are sad that we will miss his contributions to the community.
I think one of the greatest qualities of passionate community contributors/leaders is that they help to inspire and create more such contributors and pass on the torch before they move on. Thanks to the initial efforts of [Imran](https://twitter.com/secfigo) and [Raghu](https://twitter.com/raghunath24) - Today we have a vibrant core group at [Null Hyderabad chapter](https://twitter.com/nullhyd), and a much energetic security community!Thank you @raghunath24 for your relentless contributions to @nullhyd and @null0x00. We will miss you. Good luck! pic.twitter.com/YqPQj1TsDj
— NULL Hyderabad (@nullhyd) April 23, 2016