Summary
In this chapter, we reviewed OAuth 2, a relatively recent technology for user authentication and credentials management. OAuth 2 has a very wide reach on the web and has made great strides in usability and acceptance within the past year or two. Most public-facing sites on the modern web should plan on having some form of OAuth 2 support, and the JBCP calendar application is no exception!
We learned about the following topics: the OAuth 2 authentication mechanism and its high-level architecture and key terminology. We also learned about OAuth 2 login and automatic user registration with the JBCP calendar application. We also covered automatic login with OAuth 2 and the security of OAuth 2’s login responses.
We covered one of the simplest single sign-on mechanisms to implement with Spring Security. One of the downsides is that it does not support a standard mechanism for a single logout. In the next chapter, we will explore SAML, another standard, single sign-on...
