Authorization with OAuth 2.0 in Python

Module 1: OAuth 2.0 Fundamentals

⏳ 1 week

• Topics: OAuth roles (client, resource owner, authorization server, resource server), grant types overview

• Hands-on: Diagram and simulate each grant type using Postman

Module 2: Setting Up a Python Auth Server

⏳ 1 week

• Topics: Choosing libraries (Authlib, OAuthLib), issuer configuration, client registration

• Hands-on: Build a minimal Flask authorization server issuing access and refresh tokens

Module 3: JWT & Token Management

⏳ 1 week

• Topics: JWT structure (header, payload, signature), signing algorithms, token blacklisting

• Hands-on: Encode/decode JWTs, implement token revocation and introspection endpoints

Module 4: Securing APIs with Scopes & Claims

⏳ 1 week

• Topics: Defining and enforcing scopes, custom claims, audience restrictions

• Hands-on: Protect Flask-RESTful endpoints, enforce scope checks in middleware

Module 5: Refresh Tokens & Token Rotation

⏳ 1 week

• Topics: Refresh token grant, rotation strategies, one-time use refresh tokens

• Hands-on: Implement a secure refresh-token endpoint with rotation and reuse detection

Module 6: Integrating Social Logins

⏳ 1 week

• Topics: OAuth 2.0 as a client, redirect flows, handling provider quirks

• Hands-on: Add “Log in with Google” to your Python app using Flask-Dance or Authlib

Module 7: Advanced Security & Best Practices

⏳ 1 week

• Topics: PKCE, CORS configuration, HTTPS enforcement, rate-limiting tokens

• Hands-on: Harden your auth server with PKCE for public clients and secure cookie storage

Module 8: Capstone Project – Full OAuth Integration

⏳ 1 week

• Topics: End-to-end design, documentation, testing strategies

• Hands-on: Develop a sample microservice architecture with an auth server, resource APIs, and a React/Angular front-end using the complete OAuth 2.0 setup

Get certificate