In this video, developer advocates Lee Brandt and Aaron Parecki talk about OAuth security while David Neal draws sketchnotes live! See the completed sketchnotes picture here: https://developer.okta.com/blog/2020/11/06/oauth-sketch-notes-livestream TIMESTAMPS 0:00 Intro 0:38 Why do we need PKCE? 6:18 How PKCE works 12:30 Front channel vs back channel 22:50 What even is security? 27:54 What problem PKCE solves 29:37 XSS risks in SPAs 34:08 Embedded vs Hosted Login 42:15 OAuth vs OpenID Connect 50:30 Passwordless Login 59:30 Q&A --- Okta is a developer API service that stores user accounts for your web apps, mobile apps, and APIs. * Sign up for Okta for free at https://developer.okta.com/signup/ * For more info visit us at https://developer.okta.com/ * Developer Blog: https://developer.okta.com/blog/ * Follow us on Twitter: https://twitter.com/oktadev * Follow us on FB: https://www.facebook.com/oktadevelopers/ * Follow us on LinkedIn: https://www.linkedin.com/company/oktadev