
Adolfo Eloy Nascimento
This book targets software engineers and security experts who are looking to develop their skills in API security and OAuth 2.0. Prior programming knowledge and a basic understanding of developing web applications are necessary. As this book's recipes mostly use Spring Security and Spring Security OAuth2, some prior experience with Spring Framework will be helpful.
算是全面的介绍了OAUTH2的使用,特别是APP端,基本都讲到了。但是对应的spring security认证服务器版本太低,和现在的最新版本,相差太大,参考意义不大。而且PKCE的challenge应该是BASE64而不是HEX,源码例子严重错误!误导人。