OAuth 2.0 is an industry-standard protocol for authorization. Often maligned, sometimes misunderstood, its implementations are intended to allow clients limited access to resources without having to expose their credentials. Join me as I experiment with secure authorization flows, and analyze the gap between authorization and authentication, at scale. I’ll take you through my favourite arcane scenarios (from serverless functions to memes), and keep infrastructure and code to a minimum – helping you improve development speed, quality, and control.