{"guid":"c132e9ae-87da-4708-8a84-ad6c14ce1660","title":"Zeit für OAuth 2.1 - Security Best Practices als neuer Standard","subtitle":null,"slug":"god2026-110766-zeit-fur-oauth-21-securit","link":"https://c3voc.de","description":"Implementieren Sie OAuth noch nach einem Spec von 2012? Dann ist Ihre Anwendung vermutlich unsicher! OAuth 2.0 hat sich in 13 Jahren durch ein Labyrinth von RFCs und Best Practices entwickelt – Implicit Flow ist deprecated, PKCE ist Pflicht, Password Grant ein No-Go. Aber wer weiß das schon alles?\n\nOAuth 2.1 räumt endlich auf: Ein Draft, der alle modernen Security Best Practices vereint und unsichere Flows eliminiert. Klingt perfekt? Ist es auch! Nur leider wendet ihn fast niemand an.\n\nIn diesem Talk zeigt Ihnen Martina Kraus, warum OAuth 2.1 Ihre OAuth-Implementierung von Grund auf sicherer macht, welche Breaking Changes auf Sie warten und wie Sie schon heute damit arbeiten können.\n\nLicensed to the public under https://creativecommons.org/licenses/by-sa/4.0/","original_language":"deu","persons":["Martina Kraus"],"view_count":26,"promoted":false,"date":"2026-09-24T13:55:00.000+02:00","release_date":"2026-09-24T00:00:00.000+02:00","updated_at":"2026-09-25T07:45:04.116+02:00","tags":["110766","2026","god2026","Saal Fidelitas","god2026-deu","god2026","Day 1"],"length":2735,"duration":2735,"thumb_url":"https://static.media.ccc.de/media/events/god/2026/110766-c132e9ae-87da-4708-8a84-ad6c14ce1660.jpg","poster_url":"https://static.media.ccc.de/media/events/god/2026/110766-c132e9ae-87da-4708-8a84-ad6c14ce1660_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/god/2026/110766-c132e9ae-87da-4708-8a84-ad6c14ce1660.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/god/2026/110766-c132e9ae-87da-4708-8a84-ad6c14ce1660.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/god2026-110766-zeit-fur-oauth-21-securit","url":"https://api.media.ccc.de/public/events/c132e9ae-87da-4708-8a84-ad6c14ce1660","conference_title":"German OWASP Day 2026","conference_url":"https://api.media.ccc.de/public/conferences/god2026","related":[],"recordings":[{"length":2735,"mime_type":"video/mp4","language":"deu","filename":"god2026-110766-deu-Zeit_fuer_OAuth_21_-_Security_Best_Practices_als_neuer_Standard_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2026-09-24T15:25:37.481+02:00","label":"deu 1080p","size":289,"recording_url":"https://cdn.media.ccc.de/events/god/2026/h264-hd/god2026-110766-deu-Zeit_fuer_OAuth_21_-_Security_Best_Practices_als_neuer_Standard_hd.mp4","url":"https://api.media.ccc.de/public/recordings/105385","event_url":"https://api.media.ccc.de/public/events/c132e9ae-87da-4708-8a84-ad6c14ce1660","conference_url":"https://api.media.ccc.de/public/conferences/god2026"},{"length":2735,"mime_type":"audio/mpeg","language":"deu","filename":"god2026-110766-deu-Zeit_fuer_OAuth_21_-_Security_Best_Practices_als_neuer_Standard_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2026-09-24T15:27:31.945+02:00","label":"deu","size":42,"recording_url":"https://cdn.media.ccc.de/events/god/2026/mp3/god2026-110766-deu-Zeit_fuer_OAuth_21_-_Security_Best_Practices_als_neuer_Standard_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/105386","event_url":"https://api.media.ccc.de/public/events/c132e9ae-87da-4708-8a84-ad6c14ce1660","conference_url":"https://api.media.ccc.de/public/conferences/god2026"},{"length":2735,"mime_type":"video/mp4","language":"deu","filename":"god2026-110766-deu-Zeit_fuer_OAuth_21_-_Security_Best_Practices_als_neuer_Standard_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2026-09-24T15:29:52.471+02:00","label":"deu 576p","size":89,"recording_url":"https://cdn.media.ccc.de/events/god/2026/h264-sd/god2026-110766-deu-Zeit_fuer_OAuth_21_-_Security_Best_Practices_als_neuer_Standard_sd.mp4","url":"https://api.media.ccc.de/public/recordings/105387","event_url":"https://api.media.ccc.de/public/events/c132e9ae-87da-4708-8a84-ad6c14ce1660","conference_url":"https://api.media.ccc.de/public/conferences/god2026"},{"length":2735,"mime_type":"video/webm;codecs=av01","language":"deu","filename":"god2026-110766-deu-Zeit_fuer_OAuth_21_-_Security_Best_Practices_als_neuer_Standard_av1-sd.webm","state":"new","folder":"av1-sd","high_quality":false,"width":720,"height":576,"updated_at":"2026-09-24T15:31:02.333+02:00","label":"deu 576p","size":75,"recording_url":"https://cdn.media.ccc.de/events/god/2026/av1-sd/god2026-110766-deu-Zeit_fuer_OAuth_21_-_Security_Best_Practices_als_neuer_Standard_av1-sd.webm","url":"https://api.media.ccc.de/public/recordings/105388","event_url":"https://api.media.ccc.de/public/events/c132e9ae-87da-4708-8a84-ad6c14ce1660","conference_url":"https://api.media.ccc.de/public/conferences/god2026"},{"length":2735,"mime_type":"audio/opus","language":"deu","filename":"god2026-110766-deu-Zeit_fuer_OAuth_21_-_Security_Best_Practices_als_neuer_Standard_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2026-09-24T15:31:51.196+02:00","label":"deu","size":27,"recording_url":"https://cdn.media.ccc.de/events/god/2026/opus/god2026-110766-deu-Zeit_fuer_OAuth_21_-_Security_Best_Practices_als_neuer_Standard_opus.opus","url":"https://api.media.ccc.de/public/recordings/105389","event_url":"https://api.media.ccc.de/public/events/c132e9ae-87da-4708-8a84-ad6c14ce1660","conference_url":"https://api.media.ccc.de/public/conferences/god2026"},{"length":2735,"mime_type":"video/webm;codecs=av01","language":"deu","filename":"god2026-110766-deu-Zeit_fuer_OAuth_21_-_Security_Best_Practices_als_neuer_Standard_av1-hd.webm","state":"new","folder":"av1-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2026-09-24T15:46:21.472+02:00","label":"deu 1080p","size":193,"recording_url":"https://cdn.media.ccc.de/events/god/2026/av1-hd/god2026-110766-deu-Zeit_fuer_OAuth_21_-_Security_Best_Practices_als_neuer_Standard_av1-hd.webm","url":"https://api.media.ccc.de/public/recordings/105390","event_url":"https://api.media.ccc.de/public/events/c132e9ae-87da-4708-8a84-ad6c14ce1660","conference_url":"https://api.media.ccc.de/public/conferences/god2026"},{"length":2735,"mime_type":"video/webm","language":"deu","filename":"god2026-110766-deu-Zeit_fuer_OAuth_21_-_Security_Best_Practices_als_neuer_Standard_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2026-09-24T15:54:36.169+02:00","label":"deu 1080p","size":245,"recording_url":"https://cdn.media.ccc.de/events/god/2026/webm-hd/god2026-110766-deu-Zeit_fuer_OAuth_21_-_Security_Best_Practices_als_neuer_Standard_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/105391","event_url":"https://api.media.ccc.de/public/events/c132e9ae-87da-4708-8a84-ad6c14ce1660","conference_url":"https://api.media.ccc.de/public/conferences/god2026"},{"length":2735,"mime_type":"video/webm","language":"deu","filename":"god2026-110766-deu-Zeit_fuer_OAuth_21_-_Security_Best_Practices_als_neuer_Standard_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2026-09-24T15:56:33.151+02:00","label":"deu 576p","size":97,"recording_url":"https://cdn.media.ccc.de/events/god/2026/webm-sd/god2026-110766-deu-Zeit_fuer_OAuth_21_-_Security_Best_Practices_als_neuer_Standard_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/105392","event_url":"https://api.media.ccc.de/public/events/c132e9ae-87da-4708-8a84-ad6c14ce1660","conference_url":"https://api.media.ccc.de/public/conferences/god2026"}]}