Want to create an interactive transcript for this episode?
Podcast: airhacks.fm podcast with adam bien
Episode: JAX-RS, OAuth, OpenID Connect (OIDC), Authentication, Authorization and Quarkus
Description: An airhacks.fm conversation with Sergey Beryozkin (@sberyozkin) about:
RPC vs. REST,
Paul Sandoz was driving the JAX-RS specification,
the scalability of REST,
the Tolerant Reader pattern,
HATEOAS,
Jersey was the reference implementation of JAX-RS,
JAX-RS without servlets,
the problems with OAuth 1,
OAuth 2 fixed OAuth 1 problems,
the session fixation problem,
OIDC builds on OAuth 2,
in OAuth 2 there are no sessions,
Confidential OIDC client,
OIDC extension,
Elytron Security OAuth 2.0,
ID tokens vs. access tokens,
Opaque access tokens vs. JWT access tokens,
the implicit flow,
SmallRye JWT extension vs. OIDC extension,
the importance of standards,
the value of standards,
passkeys the NeXT...