
Adolfo Eloy Nascimento
This book targets software engineers and security experts who are looking to develop their skills in API security and OAuth 2.0. Prior programming knowledge and a basic understanding of developing web applications are necessary. As this book's recipes mostly use Spring Security and Spring Security OAuth2, some prior experience with Spring Framework will be helpful.
算是全面的介紹了OAUTH2的使用,特別是APP端,基本都講到了。但是對應的spring security認證服務器版本太低,和現在的最新版本,相差太大,參考意義不大。而且PKCE的challenge應該是BASE64而不是HEX,源碼例子嚴重錯誤!誤導人。