How to use OAuth 2.0 without getting a headache.

Never get confused by OAuth again and watch the video below.

Do you enjoy building exciting digital products? 


It is one of the best things. And today, you need to know OAuth to build digital products.

This is true, whether you are an architect, web developer, mobile developer, API developer, or developer of an Alexa Skill.

But many developers are afraid of complicated OAuth integrations. Complicated security is in fact the biggest hurdle for most developers.

With the knowledge gained in this course, using and building OAuth protected APIs will be easy. No need to sweat it.

Hi, I’m Matt and this is my story ...


I am your teacher for this OAuth course, but this is definitely not how I started 10 years ago, when I first ran into OAuth.

Let me tell you my story and why I started teaching OAuth ...

If you are trying to get your head around OAuth, and you are getting confused, you are definitely not alone. I was confused, when I first started out with OAuth.

At that time, I was a consultant, and got assigned on what sounded like an exciting API project. My manager made it clear to me, that this was a high-profile project of one our best clients, so I better deliver.

I desperately needed get OAuth to work for the client. So, I learned OAuth the hard way… possible, but at which cost! Countless hours of trying to make sense of complicated OAuth documentation.

I still vividly remember how I sat at Starbucks during one of those late-night learning sessions, trying to work through an OAuth interaction, using coffee mugs to represent servers and napkins to represent tokens.

There was no training material available at that time, just a big, hairy IETF document describing the standard. What a piece of work!

But I made it through and delivered the OAuth project successfully. The client was happy, and had big ambitions for his API program, increased headcount, so my small API team got five additional people. Smart guys. Programmers. Architects. And I saw how they were struggling with OAuth.

I taught them everything I know. And it was then that I decided to create an OAuth training.

This was 10 years ago. In the meanwhile I have written a book on OAuth and I have trained more than 8000 students on OAuth. And based on the questions and feedback of my students (see below on the page), I have constantly improved and tweaked the course.

And as a result of this journey, I can offer you today the OAuth course in front of you. It is the course that I would have liked to have, when I first started out.

-- Matt

Course Curriculum

  Introduction
Available in days
days after you enroll
  OAuth Big Picture
Available in days
days after you enroll
  OAuth Components
Available in days
days after you enroll
  OAuth Flows: Interactions between the OAuth Components
Available in days
days after you enroll
  Authorization Code Flow
Available in days
days after you enroll
  Authorization Code Flow: Refresh Tokens
Available in days
days after you enroll
  Implicit Flow
Available in days
days after you enroll
  Client Credentials Flow
Available in days
days after you enroll
  Resource Owner Password Credentials Flow
Available in days
days after you enroll
  OAuth vs OpenID Connect
Available in days
days after you enroll
  Use OAuth to access Facebook
Available in days
days after you enroll
  Use OAuth to access LinkedIn
Available in days
days after you enroll
  Use OAuth to access GMail and other Google Products
Available in days
days after you enroll
  Use OAuth to access Paypal
Available in days
days after you enroll
  Use OAuth to Access Spotify
Available in days
days after you enroll
  FAQ: OAuth on Mobile
Available in days
days after you enroll
  Additional Resources
Available in days
days after you enroll
  Wrapping up
Available in days
days after you enroll

Select a pricing plan and sign up

OAuth Course with Guarantee

My Personal Guarantee

If this course is not for you,

you get your money back.

Which programming language do I need to know?

You are not required to know any particular programming language. But of course, it is very helpful if you can program in any language. For all our practical exercises, we will use online tools or freely available command line tools.




Do I need my own OAuth server for this course?

You do not need an OAuth server of your own to complete this course and the practical exercises. 

Everything you need is included in this course package. For the practical exercises, we will use the OAuth servers of Google, LinkedIn, Paypal, and Facebook. I will show you how to find these OAuth servers and how to use them.




What is all the knowledge on OAuth good for, if you cannot apply it?

Couldn’t agree more. Yet, teaching theory is what basically all the courses out there do. But this course is different.

In this course you will use OAuth hands-on. We do this in two steps. First, I will practically show you how I use OAuth. And you can look me over the shoulder. But that is not all. In a second step, it is your turn. This is usually, where the real magic of learning happens. When you have to figure it out yourself. But don’t worry, I am with you and I have prepared all the material you need for you.

I will hand out step by step worksheets for you, so you can follow along, and successfully do all these steps on your own. So you can really learn, and immediately apply OAuth in your projects.




How do you ensure, students really know OAuth after the course?

I believe in practical learning, as I have explained in the previous section. Looking over the shoulder of an expert and then trying to do it on your own. Combined with a solid foundation in the OAuth protocol, which I provide in this course, you will know OAuth and how to apply it.

But you need to do that on a couple of OAuth providers, so you get the depth needed. You will not only gain practical experiences with a single OAuth provider. In this course, we study and practically experience OAuth of all the big OAuth providers: Google, LinkedIn, Paypal, Facebook. You will see and do everything that needs to be done before starting OAuth, during the OAuth protocol execution and afterwards.




What does this course offer?

This course offers an introduction to API Security with OAuth 2.0. In 3 hours you will gain an overview of the capabilities of OAuth. You will learn the core concepts of OAuth. You will get to know all 4 OAuth flows that are used in cloud solutions and mobile apps.

If you have tried to read the official OAuth specification, you may get the impression that OAuth is complex. This course explains OAuth in simple terms. The four OAuth flows are visualized graphically using sequence diagrams. The diagrams are then animated so you get to know the interactions step by step and see the big picture of the various OAuth interactions. This high-level overview is complemented with rich set of example requests and responses and an explanation of the technical details.

Do you believe OAuth is complicated? 

This course will give you clarity by introducing the seemingly complicated material by many illustrations. These illustrations clearly show all the involved interaction parties and the messages they exchange.

Do you want to learn the OAuth concepts efficiently?

This course uses many animated diagrams and sequence diagrams. A good diagram says more than 1000 words.

Do you want to use OAuth hands-on?

This course is not just theory. It shows you step by step what you need to do to use OAuth. Practical examples include OAuth at Google, Paypal, LinkedIn and Facebook. The worksheets guide you step-by-step.

Select a pricing plan and sign up


What my former students are saying...


"This is the best OAuth2 tutorial. The explanations are very clear and sincere. In retrospect, I have now a clear understanding of what OAuth2 is trying to standardize. The best part of this course is the hands-on OAuth2 application in Facebook, Google, LinkedIn and Paypal."

 -- Dexter Aparicio


"Very good content and instructor. Matthias' course can get you from the beginning to a very good understanding of OAuth 2.0."

-- Rod Dinis


"I just finished the OAuth 2.0 training course and it was awesome! I can't believe that now, I actually understand OAuth 2.0 principles, actors and processes! Your slow and reinforcing style of teaching was critical in helping me understand. I'm going to go back and re-watch the lessons several times more...Thanks again Matt, I totally appreciate it man!"

-- Satish Iyer


"I completed your OAuth 2.0 course. This is one of the best courses I have completed. Thanks to explain everything so lucidly."

-- Dibyendu Das, Azure Solutions Architect 


"This course is the best introduction to OAuth2.0. It gives you hands-on real-world use cases. Matt has a structured way of teaching as well as clear and precise explanations on the topic. I highly recommend the course for anyone who is in the beginner and intermediate levels."

-- Nok Unphon


"Very good course explaining Oauth and the standard flows. I have not found another course going into as much detail as this course. Explanations and demos combined make this course a worthy purchase."

-- Pierre Gadea


"Really amazing part is the speaker explained the concept and in-depth domain knowledge in plain business English. As a security architect, I will use this course as a model class to improve my technology and business presentation skill."

--Feng Ren


"This is an excellent course. I will be referring to the material frequently for several projects that I am currently working on and will consider purchasing the additional recommended literature. Content within is as advertised."

-- Davin Byrne


"Good theory and very good practice"

-- Andrii Veldymanov


"Love how the teacher takes his time explaining things instead of speaking too fast."

-- Gabriel Bustos


"Explicaciones clarísimas."

-- Sofía Carolina Rodríguez


"Very clear and useful information."

-- Levan Gagnidze


"The course is wonderful and very detailed. He has demystified the whole oAuth. Simply superb!"

-- Venkat Vardineni


"If you ever wondered how and what OAuth 2.0 is and how it works, or if you know about OAuth 2.0 but are uncertain about anything, this course is definitely for you. Matthias manages to tell you everything you need to know to get into OAuth 2.0, and he explains it in a calm and quiet matter, with a lot of repetition on the important parts, so you are sure to understand everything about the course materials. Absolutely perfect."

-- Kenny Jensen


"This course was exactly what I needed. Instructor explained very well and the repetition of the flows just made the concepts stuck in my head. I highly recommend for those who are just starting with OAuth 2.0. Thanks!"

-- Dan Zorici


"O curso é realmente bem completo sobre o funcionamento de todo o método OAuth. Os exemplos práticos ajudam a entender."

-- Claudio Nastasi Junior


This course is for you...

...if you want to improve your market value as a Software Engineer and Security Expert. Imagine what could happen to your professional career if you could add API Security and OAuth skills to your CV! 

API Security experts and engineers who understand OAuth are in HIGH DEMAND, as companies expand their digital business. Plenty of opportunities are waiting for anyone who has the right skills.