Modern authentication solutions in Angular 2 with OAuth 2.0 and OpenId Connect

Jul 2, 20164 likes2,777 views

This document provides an overview of modern authentication solutions using OAuth 2.0 and OpenId Connect for authenticating users in Angular applications. It discusses how OAuth 2.0 allows clients to securely delegate user access rights to resources stored on a resource server, and how OpenId Connect extends OAuth 2.0 to provide authentication by defining how to query user profile information from an authorization server. It also covers how to implement guards in Angular to protect routes and components by controlling activation and deactivation based on authentication status. Code examples and a demo are provided.

1
Modern authentication solutions with OAuth 2.0,
OpenId Connect and Angular
Manfred Steyer
ManfredSteyer
About me …
 Manfred Steyer
 SOFTWAREarchitekt.at
 Trainer & Consultant
 Focus: Angular
Page  3
Manfred Steyer

2
Contents
Motivation
Overview of OAuth 2.0
Overview of OpenId Connect
DEMO
Guards in the newest new Router
DEMO
Folie 6
MOTIVATION
Page  7

3
One User - (too) many User-Accounts
Folie 8
One Client - (too) many User-Accounts
Folie 9

4
OVERVIEW OF OAUTH 2.0
Page  10
What is OAuth?
Developed at Twitter and Ma.gnolia
Standard for the delegation of (restricted) rights
Used by companies like Google, Facebook, Flickr,
Microsoft, Salesforce.com and Yahoo!
Folie 11

5
Roles
Folie 12
Client
Authorization-Server
Resource-ServerUser
(Resource-Owner)
Roles
Folie 13
Client
Authorization-Server
Resource-ServerUser
(Resource-Owner)
Registered with
client_id,
client_secret,
redirect_uri Registered with
Credentials

6
High-Level-View
Folie 14
Client
Authorization-Server
Resource-Server
1. Redirection
2. Redirection
3. Access-Token
Details depend on flow Central User-Accounts
Only Auth-Server gets pwd.
Access-Token
Auth is decoupled
Token: Flexibility
No Cookie: No CSRF
AUTHENTICATION
Page  39

8
DEMO
Page  50
PROTECTING ROUTES
WITH GUARDS
Page  52

9
What are Guards?
Services
Can get other services via DI
Router triggers Guards before activating/
deactivating Components
Can prevent activation/ deactivation
Page  53
Guards
CanActivate canActivate
CanDeactivate<T> canDeactivate
Result: boolean | Observable<boolean>

$10 Configuring Guards Page  55 const APP_ROUTES: RouterConfig = [ { path: '/flug-buchen', component: FlugBuchenComponent, canActivate: [AuthGuard], children: [ { path: 'flug-edit/:id', component: FlugEditComponent, canDeactivate: [FlightEditGuard] }, […] ] ] Token Provider for Guards Page  56 export const APP_ROUTER_PROVIDER = [ provideRouter(APP_ROUTES), { provide: FlightEditGuard, useClass: FlightEditGuard }, { provide: AuthGuard, useClass: AuthGuard } ];$

11
Provider for Guards
Page  57
export const APP_ROUTER_PROVIDER = [
provideRouter(APP_ROUTES),
FlightEditGuard,
AuthGuard
];
DEMO
Page  58

12
Conclusion
OAuth 2.0: Delegating rights
Implicit Grant for SPA
OpenId Connect: Authentication with OAuth 2.0
Central User-Accounts
Only Auth-Server gets password
Folie 59
manfred.steyer@softwarearchitekt.at
ManfredSteyer
www.softwarearchitekt.at
Contact

This document discusses securing access to applications and APIs using OAuth2 authentication via the FI-WARE Account service. It covers registering applications, authenticating users via username and password, and authorizing access to protected resources. The OAuth2 flows of authorization code, implicit, resource owner password credentials, and client credentials grants are described. Finally, it discusses using access tokens to access resources in FI-WARE generic enablers, third-party services, and cloud platforms.

Integrating Fiware Orion, Keyrock and WilmaDalton Valadares

This document provides instructions for setting up and integrating the FIWARE components Orion Context Broker, Keyrock Identity Manager, and Wilma PEP Proxy on a single machine. It describes how to install and test each component individually using Docker containers or VirtualBox images. It then explains how to configure the components to work together by setting up authentication in Keyrock and passing tokens through Wilma to authorize requests to Orion.

Keyrock - Lesson 3. Applications. How to create OAuth2 tokens.Álvaro Alonso González

OpenID Authentication by exampleChris Vertonghen

This document discusses OpenID, an open standard for decentralized authentication on the web. It notes some problems with traditional username and password systems like passwords being hard to manage and user databases being vulnerable to theft. OpenID provides a solution by allowing users to authenticate using a URL of their choice, like a personal domain name, rather than having separate usernames and passwords for each site. When authenticating with a new site, OpenID verifies the user's identity through their OpenID provider rather than the site directly. The document provides examples of how OpenID works and can be implemented using libraries like Net::OpenID::Consumer in Perl. It also addresses questions like how to choose an OpenID provider and maintain multiple personas.

OAuth and OpenID Connect for MicroservicesTwobo Technologies

The document discusses using OAuth and OpenID Connect to secure microservices. It describes how OAuth allows for scalable delegation of access across services. OpenID Connect builds on OAuth to also return identity information to clients in a JSON Web Token (JWT), allowing for single sign-on. The document recommends using OAuth/OIDC to authenticate users centrally and issuing JWTs to microservices, translating tokens through an API gateway for service-to-service communication.

Stateless authentication for microservicesAlvaro Sanchez-Mariscal

This talk is about how to secure your frontend+backend applications using a RESTful approach. As opposed to traditional and monolithic server-side applications (where the HTTP session is used), when your frontend application is running on a browser and not securely from the server, there are few things you need to consider. In this session Alvaro will explore standards like OAuth or JWT to achieve a stateless, token-based authentication using frameworks like Angular JS on the frontend and Spring Security on the backend. Video available at https://skillsmatter.com/skillscasts/6058-stateless-authentication-for-microservices

Angular 2 for Java DevelopersYakov Fain

This document provides an overview of Angular 2 for Java developers. It discusses that Angular 2 is a complete rewrite of AngularJS with a focus on components, better performance, and streamlined dependency injection. It also covers key aspects of Angular 2 like project structure, templates, data binding, dependency injection, routing, and use of reactive programming with RxJS. Sample code examples are provided to demonstrate concepts like components, services, dependency injection, routing, and use of observables.

AngularJS Security: defend your Single Page Application Carlo Bonamico

The document summarizes Carlo Bonamico's presentation on securing AngularJS single page applications. The presentation discusses how authentication and security risks change in SPAs compared to traditional web apps, focusing on cross-site scripting and security misconfiguration. It also covers approaches to authentication in SPAs using token-based authentication with JSON Web Tokens instead of traditional session management with cookies.

Stateless Auth using OAuth2 & JWTGaurav Roy

The document discusses stateless authorization using OAuth2 and JSON Web Tokens (JWT). It begins with an introduction to authentication, authorization, and single sign-on (SSO). It then provides an in-depth explanation of OAuth2 actors, flows, and grant types. The Authorization Code Grant flow and Implicit Grant flow are explained in detail. Finally, it introduces JWT and why it is a suitable standard for representing OAuth2 access tokens since it meets the requirements and libraries are available.

Oauth2.0 tutorialHarikaReddy115

OAuth 2.0 is an open authorization protocol that allows clients to access user resources stored on another site, without using the user's credentials. It uses authorization tokens instead of passwords. The OAuth 2.0 architecture involves a client application requesting authorization from the resource owner to access protected resources from an authorization server. If authorized, the client receives an access token to access the protected resources on behalf of the resource owner.

OAuth with Salesforce - DemystifiedCalvin Noronha

Stateless Auth using OAUTH2 & JWTMobiliya

Demystifying OAuth 2.0Yury Roa

OAuth is a protocol that allows clients limited access to protected resources on behalf of a resource owner through delegated authorization. It addresses issues with directly sharing user credentials by using tokens issued by an authorization server to represent temporary and limited authorization to access a resource on behalf of a resource owner. The key components in OAuth are the resource owner, client, authorization server, and protected resource. OAuth uses grant types like authorization code, implicit, client credentials, and resource owner password credentials to obtain access tokens from the authorization server to access protected resources.

OAuth In The Real World : 10 actual implementations you can't guessMehdi Medjaoui

This document summarizes the key challenges with OAuth implementations across different providers. It notes that while OAuth 1.0 and 2.0 were created to standardize authorization, in practice most major providers have implemented OAuth in non-standard and non-interoperable ways, with variations in parameters, response fields, API authorization methods, and scope formats. This has led to confusion for developers trying to support multiple providers. The document advocates for solutions that abstract away these differences to make OAuth usage simpler and more consistent.

Adding Identity Management and Access Control to your ApplicationÁlvaro Alonso González

This document discusses adding identity management and access control to applications using FIWARE. It describes FIWARE Lab account types, registering applications, and using Generic Enablers. It also covers securing the backend using authentication, authorization, and security Generic Enablers like KeyRock for identity management and AuthZForce for authorization policies. Developers can use OAuth2 flows to authenticate users and PEP Proxy to enforce access control policies on resources.

Oauth2.0Yasmine Gaber

This document provides an overview of OAuth 2.0. It discusses what OAuth is, its history and terminology. It then covers the main authorization flows in OAuth 2.0 including server-side web applications, client-side web applications, resource owner passwords, and client credentials. Considerations for using OAuth in mobile apps are also outlined. The document concludes with information about tools, libraries and a demo for implementing OAuth.

Introduction To Open Web ProtocolsMohan Krishnan

In this presentation I provide a gentle introduction to successful open web protocols such as OpenID, OAuth, Atompub and OpenSocial in terms of what they provide as well as how they can be useful to developers. Presented at the inaugural MSCOSCON 2009 in Malaysia. Note: This presentation draws from a lot of existing content online and I have attempted to ensure that the sources have copyright that allowed reuse as well as all sources have been duly attributed. If there is any attribution missing or misuse of content please do contact me and I will rectify it.

Oauth 2.0 Introduction and Flows with MuleSoftshyamraj55

Web Based Affiliate Network System Mike Taylor

This document outlines a case study for a web-based affiliate network system. The system aims to provide an affiliate solution for small to medium retailers to drive traffic and increase sales. It has two main types of users: retailers who manage profiles, products, and commissions, and publishers who manage relationships and view reports. The system was developed using Symfony and Doctrine on a Red Hat Linux server with MySQL database. It follows a four-tier architecture separating data, business logic, and interfaces.

Keeping Pace with OAuth’s Evolving Security Practices.pdfSirris

OAuth - Don’t Throw the Baby Out with the Bathwater Apigee | Google Cloud

This document discusses OAuth 2.0 and provides recommendations for its use. It summarizes the history of OAuth 1.0 and 2.0, key concepts of OAuth 2.0 like grant types and token types, and real-world usage by major APIs. It recommends sticking to the basic OAuth 2.0 standard without extensions like refresh tokens for most use cases, and authenticating users through existing authentication mechanisms rather than custom implementations.

Oauth2 and OWSM OAuth2 supportGaurav Sharma

The document discusses OAuth 2.0 and how it addresses issues with traditional approaches to authorizing third party access to user accounts and resources. It provides an overview of OAuth 2.0 concepts like authorization grants, access tokens, refresh tokens, and the roles of the client, resource owner, authorization server and resource server. It then describes the authorization code grant flow and client credentials flow in more detail through examples. The goal is to explain how OAuth 2.0 works and how it can be used to securely authorize access to resources while avoiding the risks of directly sharing user credentials.

OAuth 2.0 marcwan

This document discusses migrating from ClientLogin to OAuth 2.0 for authentication with Google APIs. It provides an overview of OAuth 2.0, including that it is more secure than ClientLogin by not exposing passwords and allowing token revocation. It also outlines the steps to implement OAuth 2.0 using the web server flow, including getting credentials from the Google APIs console and using refresh tokens to automatically renew expired access tokens. Code examples are provided to demonstrate authorization and connecting to APIs using OAuth 2.0 credentials.

Implementing OpenID for Your Social Networking SiteDavid Keener

There are thousands of social networking sites, each with their own unique sign-on systems. How many user names and passwords do you really want to remember? Wouldn't it be nice if you could have a single sign-on that you could use on all of the sites that you frequent? OpenID is an open-source, decentralized sign-on technology that promises this and more. Find out how to implement OpenID for a web site using Ruby on Rails.

I Know What Youll Do Next Summer - The Skills You Will Be Learning  as a Domi...Grégory Engels

HTML5, CSS3, OpenSocial, OAuth, this are all new technologies that will be in the tool box of each Domino Developer. HTML5 was mentioned in every second slide during the App-Dev Keynote at the 2010 Lotusphere in Orlando. Reason enough to look at the buzzwords and start gathering experiences with this upcoming new technologies today. We also will take a closer look at what was announced as “Project Vulcan”

Adding Identity Management and Access Control to your ApplicationFernando Lopez Aguilar

This document discusses adding identity management and access control to applications using FIWARE. It introduces the FIWARE Identity Manager for user authentication and the OAuth 2.0 protocol. It also discusses three levels of authorization: 1) authenticating users with FIWARE accounts, 2) basic authorization of HTTP requests, and 3) advanced authorization using XACML policies. Code examples and documentation links are provided to help integrate these security features.

Managing enterprise applications, permissions, and consent in Azure Active Di...Peter Selch Dahl

Managing enterprise applications, permissions, and consent in Azure Active Di...CoLaboraDK

Der neue Component Router für Angular 2Manfred Steyer

Datenbindung und Performance in Angular 2Manfred Steyer

More Related Content

More from Manfred Steyer (20)

Der neue Component Router für Angular 2Manfred Steyer

Datenbindung und Performance in Angular 2Manfred Steyer

Single Page Applications neu gedacht: Redux in Angular 2 mit @ngrx/storeManfred Steyer

Offlinefähige Browseranwendungen: Progressive Web-Apps mit Angular 2Manfred Steyer

Angular 2: Die Ideen hinter Datenbindung und Formularen im Detail betrachtetManfred Steyer

Datengetriebene Web APIs mit Entity FrameworkManfred Steyer

Angular 2 Upgrade: Migration von AngularJS 1.x zu 2.0Manfred Steyer

This document outlines an approach for upgrading an AngularJS 1.x application to Angular 2. It discusses setting up the environment with NodeJS and Visual Studio Code. It then covers different upgrade strategies like the ostrich strategy, microservices approach, and incremental migration using ngUpgrade. It also discusses preparing the AngularJS 1.x application by writing it in the best modern way. Key concepts when moving to Angular 2 like components, directives, and TypeScript are explained. The document concludes with a demonstration of ngUpgrade and an exercise for attendees.

Web APIs mit ASP.NET Core 1Manfred Steyer

The newst new Router for Angular 2 ("Version 3")Manfred Steyer

The document discusses the new Component Router for Angular 2, including its support for lazy loading modules, hierarchical routing, guards, and auxiliary routes. The Component Router activates components instead of templates and allows lazy loading of feature modules. It also supports hierarchical routing through nested child routes. Guards can prevent activation or deactivation of components based on authentication checks. Auxiliary routes provide additional placeholder content without interfering with the main router outlet. The presentation includes demos of these features.

Databinding and Performance-Tuning in Angular 2Manfred Steyer

This document summarizes a presentation about improving performance in Angular 2 applications. It discusses how databinding works through property and event bindings. It recommends using immutable objects and Observables to improve change detection performance. Components can set ChangeDetectionStrategy.OnPush to tell Angular to only check for changes if input properties are new immutable objects rather than traversing the whole component tree by default.

Progressive web apps with Angular 2Manfred Steyer

This document discusses building progressive web apps with Angular 2. It covers using service workers to enable offline functionality through caching, implementing an app shell architecture for immediate loading, and other features like background syncing and push notifications. The last section describes the Angular Mobile Toolkit for generating starter code and manifest files to help develop progressive web apps.

Der neueste neue Router (Version 3) für Angular 2Manfred Steyer

The document discusses the new Component Router for Angular 2 and 1.x. The Component Router allows for activating components based on routes, lazy loading of components, hierarchical routing of components with child routes, guards to prevent component activation, and auxiliary routes to add additional components to routes. It provides examples of routing configuration and usage of guards and auxiliary routes. The Component Router is the new routing solution that replaces previous lifecycle hooks and provides additional capabilities over prior routing implementations.

WebpackManfred Steyer

ASP.NET Core 1 for MVC- and WebAPI-DevsManfred Steyer

The document provides an overview of changes for developers moving to ASP.NET Core 1 from MVC and Web API. Key changes include ASP.NET Core 1 being cross-platform and lightweight, unifying MVC and Web API concepts, and reworking low-level APIs. The middleware pipeline is configured to route requests and add services. Tag helpers replace HTML helpers for view rendering. Web APIs use attribute routing but no longer have conventions for HTTP verbs; the WebApiCompatShim can be added to support conventions.

EF Core 1: News features and changesManfred Steyer

This document discusses Entity Framework Core 1, which is a new version of Entity Framework designed for .NET Core. It highlights some key changes and new features in Entity Framework Core 1 compared to the previous EF 6 version. These include a focus on Code First development, removal of the ObjectContext API, and support for additional database providers and platforms like NoSQL, Linux, and Universal Windows Apps. While EF Core 1 brings new capabilities, the document recommends continuing to use EF 6 for most applications for now due to some limitations in the initial EF Core 1 release.

Angular 2: Migration - SSD 2016 LondonManfred Steyer

This document discusses various migration paths from AngularJS 1.x to Angular 2.0. It begins by outlining general approaches like the ostrich strategy of ignoring Angular 2, or taking a microservice approach. It then covers preparation steps like using components in AngularJS 1.5. Next it explains how to use the component router in AngularJS 1.x to more easily migrate to Angular 2. It also discusses using TypeScript and ES6 features. The document concludes by explaining ngUpgrade which allows building an application with both AngularJS 1.x and Angular 2 modules.

Angular 2 - SSD 2016 LondonManfred Steyer

ASP.NET Web API Deep Dive - SSD 2016 LondonManfred Steyer

This document provides an overview of advanced features in ASP.NET Web API, including configuring formatters, custom formatters, streaming, versioning, OData, Swagger metadata, security with HTTP Basic and tokens. The document outlines these topics and indicates there will be demos of formatters, streaming, versioning, OData, Swagger, and security. It is intended to show advanced features of ASP.NET Web API.

Was bringt Angular 2?Manfred Steyer

Web APIs mit ASP.NET MVC Core 1Manfred Steyer

Der neue Component Router für Angular 2Manfred Steyer

Datenbindung und Performance in Angular 2Manfred Steyer

Single Page Applications neu gedacht: Redux in Angular 2 mit @ngrx/storeManfred Steyer

Offlinefähige Browseranwendungen: Progressive Web-Apps mit Angular 2Manfred Steyer

Angular 2: Die Ideen hinter Datenbindung und Formularen im Detail betrachtetManfred Steyer

Datengetriebene Web APIs mit Entity FrameworkManfred Steyer

Angular 2 Upgrade: Migration von AngularJS 1.x zu 2.0Manfred Steyer

Web APIs mit ASP.NET Core 1Manfred Steyer

The newst new Router for Angular 2 ("Version 3")Manfred Steyer

Databinding and Performance-Tuning in Angular 2Manfred Steyer

Progressive web apps with Angular 2Manfred Steyer

Der neueste neue Router (Version 3) für Angular 2Manfred Steyer

WebpackManfred Steyer

ASP.NET Core 1 for MVC- and WebAPI-DevsManfred Steyer

EF Core 1: News features and changesManfred Steyer

Angular 2: Migration - SSD 2016 LondonManfred Steyer

Angular 2 - SSD 2016 LondonManfred Steyer

ASP.NET Web API Deep Dive - SSD 2016 LondonManfred Steyer

Was bringt Angular 2?Manfred Steyer

Web APIs mit ASP.NET MVC Core 1Manfred Steyer

Recently uploaded (17)

What to Expect When Hiring Shopify Development Services_ A Technical Walkthro...CartCoders

Internet_of_Things_Presentation_by-Humera.pptxcshumerabashir

ICP -2 Review – What It Is, and How to Participate and Provide Your FeedbackAPNIC

3D Graphics an introduction and details .pptxislamicknowledge5224

最新版西班牙加泰罗尼亚国际大学毕业证（UIC毕业证书）原版定制Taqyea

挂科无法毕业鉴于此购买文凭【q薇1954292140】一比一原版(UIC毕业证)加泰罗尼亚国际大学毕业证如何办理改成绩单GPA，文凭购买，毕业证办理，文凭办理只是基础业务。【q薇1954292140】一比一还原国外大学毕业证，定制国外大学学历，制作国外大学文凭，复刻国外大学毕业证书。学位证1:1完美还原海外各大学毕业材料上的工艺：水印，阴影底纹，钢印LOGO烫金烫银，LOGO烫金烫银复合重叠。文字图案浮雕、激光镭射、紫外荧光、温感、复印防伪等防伪工艺。【办理加泰罗尼亚国际大学成绩单Buy Universitat Internacional de Catalunya Transcripts】购买日韩成绩单、英国大学成绩单、美国大学成绩单、澳洲大学成绩单、加拿大大学成绩单（q微1954292140）新加坡大学成绩单、新西兰大学成绩单、爱尔兰成绩单、西班牙成绩单、德国成绩单。成绩单的意义主要体现在证明学习能力、评估学术背景、展示综合素质、提高录取率，以及是作为留信认证申请材料的一部分。加泰罗尼亚国际大学成绩单能够体现您的的学习能力，包括加泰罗尼亚国际大学课程成绩、专业能力、研究能力。（q微1954292140）具体来说，成绩报告单通常包含学生的学习技能与习惯、各科成绩以及老师评语等部分，因此，成绩单不仅是学生学术能力的证明，也是评估学生是否适合某个教育项目的重要依据！ Buy Universitat Internacional de Catalunya Diploma《正式成绩单论文没过》有文凭却得不到认证。又该怎么办？鉴于此，购买西班牙毕业证【q微1954292140】西班牙文凭购买，西班牙文凭购买，西班牙文凭定制，西班牙文凭补办。专业在线定制西班牙大学文凭，定做西班牙本科文凭，【q微1954292140】复制西班牙Universitat Internacional de Catalunya completion letter。在线快速补办西班牙本科毕业证、硕士文凭证书，购买西班牙学位证、加泰罗尼亚国际大学Offer，西班牙大学文凭在线购买。【主营项目】一、工作未确定，回国需先给父母、亲戚朋友看下文凭的情况，办理毕业证|办理加泰罗尼亚国际大学毕业证（UIC毕业证书）文凭: 买大学毕业证|买大学文凭【q薇1954292140】学位证明书如何办理申请？二、回国进私企、外企、自己做生意的情况，这些单位是不查询毕业证真伪的，而且国内没有渠道去查询国外文凭的真假，也不需要提供真实教育部认证。鉴于此，办理加泰罗尼亚国际大学毕业证【q薇1954292140】西班牙学位证（UIC毕业证书）加泰罗尼亚国际大学毕业证书如何办理国外大学毕业证, 文凭办理, 国外文凭办理, 留信网认证三.材料咨询办理、认证咨询办理加泰罗尼亚国际大学毕业证（UIC毕业证书）请加学历顾问【微信:1954292140】毕业证购买指大学文凭购买，毕业证办理和文凭办理。学院文凭定制，学校原版文凭补办，扫描件文凭定做，100%文凭复刻。经常操作的国家有美国毕业证，英国毕业证，澳洲毕业证，加拿大毕业证，以及德国毕业证，法国毕业证、荷兰毕业证、瑞士毕业证、日本毕业证、韩国毕业证、新西兰毕业证、新加坡毕业证、泰国毕业证、马来西亚毕业证等。包括了本科毕业证，硕士毕业证。

Inter-Mirifica-Navigating-Media-in-the-Modern-World.pptxsecretarysocom

On Dec. 4, 1963, the Second Vatican Council solemnly approved its first two documents: the constitution on the Sacred Liturgy, Sacrosanctum Concilium, and the decree Inter Mirifica, regarding the mass media. The latter document is much less known than the former one. Nonetheless, Inter Mirifica offers some crucial principles to guide us in a world where we find ourselves ever more immersed in mass communication: the press, film, television, along with the newer forms of media. During the preparation for Vatican II, the Church keenly realized the importance of this topic, and Pope John XXIII established a special body to work on a text that might articulate the Church’s teaching on the mass media and promote her action in this area. The result of this work was an extensive document, entitled “On the instruments of social communication,” which was presented to the Council on Nov. 23, 1962.

Networking_Essentials_version_3.0_-_Module_7.pptxelestirmen

10 Latest Technologies and Their Benefits to End.pptxEphraimOOghodero

MOBILE PHONE DATA presentation with all necessary detailsbenamorraj

Darley - BSides Nairobi (2025-06-07) Epochalypse 2038 - Time is Not on Our Si...treyka

Epochalypse 2038: Time is Not on Our Side Presented by Trey Darley, Founder – Threshold Continuity Alliance BSides Nairobi – 2025-06-07 The Year 2038 Problem is real — and it's already here. At exactly 03:14:07 UTC on January 19, 2038, 32-bit signed Unix time overflows. Systems that use 32-bit time_t will reset to 1901 and/or fail outright. But this isn’t just about old embedded gear. It’s about trust, cryptographic integrity, log coherence, financial timestamps, system coordination, and the fragile scaffolding of global infrastructure. This talk explores a dangerous and still largely invisible class of vulnerabilities: timestamp fragility and time synchronization failure. We cover: - Why over 60% of global software systems still depend on Unix epoch time - How 2038 bugs can manifest subtly — without a crash, and without warning - Why critical infrastructure (energy, telecom, aviation, finance) is especially at risk - How even modern firmware is being shipped today with latent Y2038 bugs - The implications for TLS certificates, forensic timelines, billing systems, and safety-critical protocols - How time can be maliciously spoofed, delayed, or misaligned — and why legacy NTP is often unauthenticated - A pragmatic call for 2038 rollover testbeds, code audits, and hardened time infrastructure - Recommendations for deploying secure time protocols (NTS, RFC 8915), GPS + Rubidium/Cesium fallback, and air-gapped sync You’ll leave with a grounded understanding of: - Why time isn’t just an input — it’s an untrusted vector - What engineers, regulators, and defenders must do now to avert a long-tail catastrophe - How underserved regions may suffer disproportionately — but also leap ahead by refusing to inherit broken time About the Speaker Trey Darley is the founder of the Threshold Continuity Alliance (TCA), an initiative focused on strategic risk, infrastructure integrity, and time-based vulnerability remediation. A long-time figure in the global cybersecurity community, Trey works at the intersection of symbolic systems, resilience engineering, and future ethics.

Google_Cloud_Computing_Fundamentals.pptxektadangwal2005

Predicting Site Quality Google Patent US9767157B2 - Behzad Hussain.pdfBehzad Hussain

𝐏𝐚𝐭𝐞𝐧𝐭 𝐈𝐧𝐟𝐨𝐫𝐦𝐚𝐭𝐢𝐨𝐧 𝗣𝗮𝘁𝗲𝗻𝘁 𝗡𝗼.: US9767157B2 𝗧𝗶𝘁𝗹𝗲: Predicting Site Quality 𝗔𝘀𝘀𝗶𝗴𝗻𝗲𝗲: Google Inc., Mountain View, CA 𝗜𝗻𝘃𝗲𝗻𝘁𝗼𝗿𝘀: Navneet Panda; Yun Zhou 𝗜𝘀𝘀𝘂𝗲 𝗗𝗮𝘁𝗲: September 19, 2017 𝐀𝐛𝐬𝐭𝐫𝐚𝐜𝐭 This patent describes methods and systems for automatically predicting a quality score for a website (or “site”) that can be used as a ranking signal in search engines: 1. 𝗕𝗮𝘀𝗲𝗹𝗶𝗻𝗲 𝘀𝗶𝘁𝗲 𝗾𝘂𝗮𝗹𝗶𝘁𝘆 𝘀𝗰𝗼𝗿𝗲𝘀 obtained for previously scored sites. 2. 𝗣𝗵𝗿𝗮𝘀𝗲 𝗺𝗼𝗱𝗲𝗹𝘀 that map phrase-specific relative frequency measures to baseline quality scores. 3. 𝗔𝗴𝗴𝗿𝗲𝗴𝗮𝘁𝗲 𝘀𝗰𝗼𝗿𝗶𝗻𝗴 of a new site by applying the phrase model to its phrase frequencies and then predicting its overall site quality score from the aggregate. 𝐒𝐲𝐬𝐭𝐞𝐦 𝐀𝐫𝐜𝐡𝐢𝐭𝐞𝐜𝐭𝐮𝐫𝐞 (𝐅𝐢𝐠. 𝟏) 1. 𝗨𝘀𝗲𝗿 𝗗𝗲𝘃𝗶𝗰𝗲 & 𝗡𝗲𝘁𝘄𝗼𝗿𝗸: Users submit queries via a device (e.g., browser) over a network. 2. 𝗦𝗲𝗮𝗿𝗰𝗵 𝗦𝘆𝘀𝘁𝗲𝗺: Contains an Indexing Engine (builds the index database) and a Ranking Engine (ranks results). 3. 𝗦𝗶𝘁𝗲 𝗦𝗰𝗼𝗿𝗶𝗻𝗴 𝗘𝗻𝗴𝗶𝗻𝗲: Computes site quality scores using the phrase model and provides these scores to the ranking engine as part of the ranking signals. 𝐏𝐡𝐫𝐚𝐬𝐞 𝐌𝐨𝐝𝐞𝐥 𝐆𝐞𝐧𝐞𝐫𝐚𝐭𝐢𝐨𝐧 (𝐅𝐢𝐠. 𝟐) 1. 𝗧𝗼𝗸𝗲𝗻𝗶𝘇𝗮𝘁𝗶𝗼𝗻 𝗮𝗻𝗱 𝗻-𝗴𝗿𝗮𝗺 𝗘𝘅𝘁𝗿𝗮𝗰𝘁𝗶𝗼𝗻: For each site in a corpus of previously scored sites, extract n-grams (typically 2- to 5-grams) from page content. 2. 𝗥𝗲𝗹𝗮𝘁𝗶𝘃𝗲 𝗙𝗿𝗲𝗾𝘂𝗲𝗻𝗰𝘆 𝗖𝗮𝗹𝗰𝘂𝗹𝗮𝘁𝗶𝗼𝗻: For each extracted n-gram, compute its relative frequency as the ratio of pages containing that n-gram to total pages on the site. 3. 𝗕𝘂𝗰𝗸𝗲𝘁 𝗣𝗮𝗿𝘁𝗶𝘁𝗶𝗼𝗻𝗶𝗻𝗴: Group sites into 20–100 buckets based on their relative frequency measures for each n-gram, ensuring roughly equal bucket sizes or equal interval ranges. 4. 𝗕𝗮𝘀𝗲𝗹𝗶𝗻𝗲 𝗦𝗰𝗼𝗿𝗲 𝗔𝗴𝗴𝗿𝗲𝗴𝗮𝘁𝗶𝗼𝗻: For each bucket, calculate an average baseline quality score from the known scores of sites in that bucket. 5. 𝗣𝗵𝗿𝗮𝘀𝗲 𝗠𝗼𝗱𝗲𝗹 𝗖𝗼𝗻𝘀𝘁𝗿𝘂𝗰𝘁𝗶𝗼𝗻: Associate each n-gram with its vector of bucket-average quality scores. Optionally exclude “neutral” phrases whose scores are statistically indistinguishable from the global average. 𝐒𝐢𝐭𝐞 𝐐𝐮𝐚𝐥𝐢𝐭𝐲 𝐏𝐫𝐞𝐝𝐢𝐜𝐭𝐢𝐨𝐧 𝐏𝐫𝐨𝐜𝐞𝐬𝐬 (𝐅𝐢𝐠. 𝟑) 1. 𝗥𝗲𝗹𝗮𝘁𝗶𝘃𝗲 𝗙𝗿𝗲𝗾𝘂𝗲𝗻𝗰𝘆 𝗳𝗼𝗿 𝗡𝗲𝘄 𝗦𝗶𝘁𝗲: Extract the same set of n-grams from the new (previously unscored) site and compute their relative frequencies. 2. 𝗕𝘂𝗰𝗸𝗲𝘁 𝗟𝗼𝗼𝗸𝘂𝗽: For each phrase, map its relative frequency to the corresponding bucket’s average score in the phrase model. 3. 𝗔𝗴𝗴𝗿𝗲𝗴𝗮𝘁𝗲 𝗦𝗰𝗼𝗿𝗲 𝗖𝗼𝗺𝗽𝘂𝘁𝗮𝘁𝗶𝗼𝗻: Compute an aggregate score across all phrases’ bucket scores—typically via a weighted or unweighted mean. Weights can reflect phrase frequency, distance from a “neutral” score, or limit the influence of overly frequent phrases.

UV_Unwrapping_Lecture_with_Figures.pptx presentation for lecture of animation17218

Cloud Computing - iCloud by Hamza Anwaar .pptxislamicknowledge5224

Cloud Computing – iCloud Cloud computing is a modern technology that allows users to store and access data over the internet instead of using local storage devices. One of the most popular cloud services is Apple's iCloud, which is specially designed for Apple users. iCloud helps users keep their data safe, accessible, and synchronized across all Apple devices like iPhones, iPads, and MacBooks. It is simple to use, secure, and saves time by automatically backing up important information.

Vigilanti-Cura-Protecting-the-Faith.pptxsecretarysocom

On the 29th of June, 1936, Pius XI addressed a pontifical encyclical entitled "Vigilanti Cura" to all the Catholic bishops in the United States. This encyclical was dedicated to "The Motion Picture" and justified his intervention by "the lamentable progress of the motion picture art and industry in the portrayal of sin and vice". I've appropriated the title of his encyclical for my film, putting it to a completely different use to that originally intended. The 'photogenic quality' of the Latin terminology has, however, been preserved and, as per Adorno: "like a neon light which has just been switched on, the commercial and promotional nature of contemporary culture glows brightly". Vigilanti Cura is an irreverent film; insolent and deliberately confusing; a grab-bag of immorality. The montage combines a range of archival imagery from Humanite magazine with images sourced from the media (the military parade of the 14th of July, the current sorry crop of political celebrities ...) or from the cinema (the automatic writing of a puzzle composed of motifs borrowed from existing films). Vigilanti Cura ... or merely a tacit admission of the downfall of contemporary man, drowning in a sea of political, social and religious fundamentalisms. Where is he to be found? Locked in a vis-a-vis with depression and ego. Psychoanalysis no longer serves as a pretext for the dissolution of sexual and social taboos; it now provokes withdrawal into an auto-reflexive isolation, to the extent that societal problems get frozen in the mirror of Auto-Medusification. The mirror has become our idol - let's destroy it!

ARTIFICIAL INTELLIGENCE.pptx2565567765676areebaimtiazpmas

How to Make Money as a Cam Model – Tips, Tools & Real TalkCam Sites Expert

Want to turn your charm, confidence, and camera into a real source of income? This presentation reveals everything you need to know about making money as a cam model — whether you're just starting out or looking to boost your earnings. From choosing the right platform, building your fanbase, and setting up your cam space, to marketing yourself and creating passive income with clips, this guide covers it all. I’ll also share real-world insights from my experience on CamsRating.com. No BS — just proven tips, smart tools, and sexy strategies to get paid doing what you love.

What to Expect When Hiring Shopify Development Services_ A Technical Walkthro...CartCoders

Internet_of_Things_Presentation_by-Humera.pptxcshumerabashir

ICP -2 Review – What It Is, and How to Participate and Provide Your FeedbackAPNIC

3D Graphics an introduction and details .pptxislamicknowledge5224

最新版西班牙加泰罗尼亚国际大学毕业证（UIC毕业证书）原版定制Taqyea

Inter-Mirifica-Navigating-Media-in-the-Modern-World.pptxsecretarysocom

Networking_Essentials_version_3.0_-_Module_7.pptxelestirmen

10 Latest Technologies and Their Benefits to End.pptxEphraimOOghodero

MOBILE PHONE DATA presentation with all necessary detailsbenamorraj

Darley - BSides Nairobi (2025-06-07) Epochalypse 2038 - Time is Not on Our Si...treyka

Google_Cloud_Computing_Fundamentals.pptxektadangwal2005

Predicting Site Quality Google Patent US9767157B2 - Behzad Hussain.pdfBehzad Hussain

UV_Unwrapping_Lecture_with_Figures.pptx presentation for lecture of animation17218

Cloud Computing - iCloud by Hamza Anwaar .pptxislamicknowledge5224

Vigilanti-Cura-Protecting-the-Faith.pptxsecretarysocom

ARTIFICIAL INTELLIGENCE.pptx2565567765676areebaimtiazpmas

How to Make Money as a Cam Model – Tips, Tools & Real TalkCam Sites Expert

Modern authentication solutions in Angular 2 with OAuth 2.0 and OpenId Connect

1. 1 Modern authentication solutions with OAuth 2.0, OpenId Connect and Angular Manfred Steyer ManfredSteyer About me …  Manfred Steyer  SOFTWAREarchitekt.at  Trainer & Consultant  Focus: Angular Page  3 Manfred Steyer

2. 2 Contents Motivation Overview of OAuth 2.0 Overview of OpenId Connect DEMO Guards in the newest new Router DEMO Folie 6 MOTIVATION Page  7

3. 3 One User - (too) many User-Accounts Folie 8 One Client - (too) many User-Accounts Folie 9

4. 4 OVERVIEW OF OAUTH 2.0 Page  10 What is OAuth? Developed at Twitter and Ma.gnolia Standard for the delegation of (restricted) rights Used by companies like Google, Facebook, Flickr, Microsoft, Salesforce.com and Yahoo! Folie 11

5. 5 Roles Folie 12 Client Authorization-Server Resource-ServerUser (Resource-Owner) Roles Folie 13 Client Authorization-Server Resource-ServerUser (Resource-Owner) Registered with client_id, client_secret, redirect_uri Registered with Credentials

6. 6 High-Level-View Folie 14 Client Authorization-Server Resource-Server 1. Redirection 2. Redirection 3. Access-Token Details depend on flow Central User-Accounts Only Auth-Server gets pwd. Access-Token Auth is decoupled Token: Flexibility No Cookie: No CSRF AUTHENTICATION Page  39

7. 7 OpenId Connect (OIDC) Extension of OAuth 2.0 Defines how to use OAuth 2.0 for Authentication Defines how to query User Profile Client also gets ID-Token  JWT-Token with information about user  Can be signed by the issuer Shuts down some security holes Folie 45 OIDC Folie 46 Authorization-Server Client 1 Service 1 Access-Token ID-Token /service-url + Access-Token

8. 8 DEMO Page  50 PROTECTING ROUTES WITH GUARDS Page  52

9. 9 What are Guards? Services Can get other services via DI Router triggers Guards before activating/ deactivating Components Can prevent activation/ deactivation Page  53 Guards CanActivate canActivate CanDeactivate<T> canDeactivate Result: boolean | Observable<boolean>

10. 10 Configuring Guards Page  55 const APP_ROUTES: RouterConfig = [ { path: '/flug-buchen', component: FlugBuchenComponent, canActivate: [AuthGuard], children: [ { path: 'flug-edit/:id', component: FlugEditComponent, canDeactivate: [FlightEditGuard] }, […] ] ] Token Provider for Guards Page  56 export const APP_ROUTER_PROVIDER = [ provideRouter(APP_ROUTES), { provide: FlightEditGuard, useClass: FlightEditGuard }, { provide: AuthGuard, useClass: AuthGuard } ];

11. 11 Provider for Guards Page  57 export const APP_ROUTER_PROVIDER = [ provideRouter(APP_ROUTES), FlightEditGuard, AuthGuard ]; DEMO Page  58

12. 12 Conclusion OAuth 2.0: Delegating rights Implicit Grant for SPA OpenId Connect: Authentication with OAuth 2.0 Central User-Accounts Only Auth-Server gets password Folie 59 [email protected] ManfredSteyer www.softwarearchitekt.at Contact

Modern authentication solutions in Angular 2 with OAuth 2.0 and OpenId Connect

Recommended

More Related Content

Similar to Modern authentication solutions in Angular 2 with OAuth 2.0 and OpenId Connect (20)

More from Manfred Steyer (20)

Recently uploaded (17)

Modern authentication solutions in Angular 2 with OAuth 2.0 and OpenId Connect