Let's finally understand OAuth2 & the tools to make it sing
Most of us have had to build or integrate "Login with Facebook" features in the past. And if you're like me, you did this ten times without actually understanding how OAuth2 works! But since nothing feels worse than hacking at a black hole until it suddenly functions, let's step back and finally get a handle on OAuth!
In this talk, we'll learn the most common flows (called grant types), including the most one you're most familiar with: the authorization code grant type. We'll use Guzzle to build some real code that does the OAuth2 dance with Facebook and cover security-related topics like state. We'll also install and learn about the OAuth2 PHP client library that makes talking with an OAuth2 server a breeze. By the end of this talk, you'll no longer fear OAuth2: you'll be craving for an opportunity to bend it to your will.