<?php

$page_title = "Books about OAuth";
$page_section = "books";
$page_secondary = "";
$page_meta_description = "";

require('../../includes/_header.php');
?>

  <div class="container">

    <div>
      <h2>Books about OAuth 2.0</h2>

      <div class="book-row" id="oauth-2-simplified">
        <div class="left">
          <a href="https://www.amazon.com/OAuth-2-0-Simplified-Aaron-Parecki/dp/1387751514/?tag=oauthnet-20" class="noprintexpand"><img src="oauth_2_simplified.jpg" alt="OAuth 2.0 Simplified Book Cover" title="OAuth 2.0 Simplified"></a>
        </div>
        <div class="right">
          <p><a href="https://www.amazon.com/OAuth-2-0-Simplified-Aaron-Parecki/dp/1387751514/?tag=oauthnet-20"><i>OAuth 2.0 Simplified</i></a> by Aaron Parecki is a guide to building an OAuth 2.0 server. Through high-level overviews, step-by-step instructions, and real-world examples, you will learn how to take advantage of the OAuth 2.0 framework while building a secure API.</p>
          <p>Whether you’re a software architect, application developer, project manager, or a casual programmer, this book will introduce you to the concepts of OAuth 2.0 and demonstrate what is required when building a server.</p>
          <p>This book is currently available from <a href="https://oauth2simplified.com/lulu.php">Lulu.com</a> and <a href="https://www.amazon.com/OAuth-2-0-Simplified-Aaron-Parecki/dp/1387130102/?tag=oauthnet-20">Amazon</a>, and on <a href="https://www.amazon.com/OAuth-2-0-Simplified-Building-Servers-ebook/dp/B07DFQ1TTW/ref=tmm_kin_swatch_0&tag=oauthnet-20">Kindle</a>.</p>
        </div>
      </div>

      <div class="book-row" id="little-book-of-rfcs">
        <div class="left">
          <a href="https://www.amazon.com/Little-Book-OAuth-2-0-RFCs/dp/B084DFYJS1/?tag=oauthnet-20" class="noprintexpand"><img src="little-book-of-oauth-rfcs.png" alt="The Little Book of OAuth 2.0 RFCs" title="The Little Book of OAuth 2.0 RFCs"></a>
        </div>
        <div class="right">
          <p><a href="https://www.amazon.com/Little-Book-OAuth-2-0-RFCs/dp/B084DFYJS1/?tag=oauthnet-20"><i>The Little Book of OAuth 2.0 RFCs</i></a> by Aaron Parecki is a collection of the core RFCs you'll need to read in order to fully implement an OAuth 2.0 client or service. This book is a reproduction of all the RFCs relating to OAuth, everything from OAuth core RFC6749 to the latest Security Best Current Practice. Each RFC is prefaced by a short introduction to set the context for why it's important to the space.</p>
          <p>You can purchase a <a href="https://www.amazon.com/Little-Book-OAuth-2-0-RFCs/dp/B084DFYJS1/?tag=oauthnet-20">paperback copy on Amazon</a>, or <a href="The Little Book of OAuth 2.0 RFCs.pdf">download the PDF</a> for free.</p>
        </div>
      </div>

      <div class="book-row" id="oauth-2-in-action">
        <div class="left">
          <a href="https://www.amazon.com/OAuth-2-Action-Justin-Richer/dp/161729327X/?tag=oauthnet-20" class="noprintexpand"><img src="oauth_in_action.jpg" alt="OAuth in Action Cover" title="OAuth in Action"></a>
        </div>
        <div class="right">
          <p><a href="https://www.amazon.com/OAuth-2-Action-Justin-Richer/dp/161729327X/?tag=oauthnet-20"><i>OAuth 2 in Action</i></a> by Justin Richer and Antonio Sanso covers the OAuth 2 protocol in depth, providing hands-on exercises for building clients, authorization servers, and protected resources in various configurations. The book covers the structure and components of an OAuth 2 system, common vunlerabilities and mitigations, and several protocols that are built on and around OAuth 2. Exercises are included that walk through building an entire OAuth 2.0 ecosystem.</p>
          <p>This book is currently available from <a href="https://www.manning.com/books/oauth-2-in-action">Manning</a>, <a href="https://www.amazon.com/OAuth-2-Action-Justin-Richer/dp/161729327X/?tag=oauthnet-20">Amazon</a>, and wherever technical books are sold.</p>
        </div>
      </div>

      <div style="clear:both; margin-bottom: 1em;"></div>

      <div class="book-row" id="mastering-oauth-2">
        <div class="left">
          <a href="https://www.amazon.com/Mastering-OAuth-2-0-Charles-Bihis/dp/1784395404?tag=oauthnet-20" class="noprintexpand"><img src="mastering_oauth_2.jpg" alt="Mastering Oauth 2.0 Cover" title="Mastering OAuth 2.0"></a>
        </div>
        <div class="right">
          <p><a href="https://www.amazon.com/Mastering-OAuth-2-0-Charles-Bihis/dp/1784395404?tag=oauthnet-20"><i>Mastering OAuth 2.0</i></a> by Charles Bihis provides an in-depth view of the OAuth 2.0 protocol from a client perspective.  With a focus on practicality and security, this book explores the various ways in which a client can integrate with an OAuth 2.0 service provider, discussing caveats and best practices along the way.<p>
          <p>This book focuses on the client integration side of the OAuth 2.0 protocol and is ideal for client and application developers looking to integrate with OAuth 2.0 service providers in the most secure and effective way.</p>
          <p>This book is available from <a href="https://www.packtpub.com/application-development/mastering-oauth-2/?utm_source=GC-oauth.net&utm_medium=pod&utm_campaign=1784395407">Packt</a> and <a href="https://www.amazon.com/Mastering-OAuth-2-0-Charles-Bihis/dp/1784395404?tag=oauthnet-20">Amazon</a>.</p>
        </div>
      </div>

      <div class="book-row" id="api-security-in-action">
        <div class="left">
          <a href="https://www.manning.com/books/api-security-in-action" class="noprintexpand"><img src="api_security_in_action.jpg" alt="API Security in Action" title="API Security in Action"></a>
        </div>
        <div class="right">
          <p><a href="https://www.manning.com/books/api-security-in-action"><i>API Security in Action</i></a> by Neil Madden covers use of OAuth 2 to protect REST APIs, and related technologies such as JSON Web Tokens. Security enhancements including combining OAuth 2 with mutual TLS authentication are covered, along with the latest security best practices. Detailed patterns are presented for using OAuth 2 with Kubernetes and for resource-constrained IoT (Internet of Things) environments.</p>
        </div>
      </div>

      <div class="book-row" id="oauth-2-cookbook">
        <div class="left">
          <a href="https://www.amazon.com/dp/178829596X?tag=oauthnet-20" class="noprintexpand"><img src="oauth-20-cookbook.png" alt="OAuth 2.0 Cookbook" title="OAuth 2.0 Cookbook"></a>
        </div>
        <div class="right">
          <p><a href="https://www.packtpub.com/virtualization-and-cloud/oauth-20-cookbook"><i>OAuth 2.0 Cookbook</i></a> by Adolfo Eloy Nascimento provides useful recipes for solving real-life problems using Spring Security and creating Android applications.<p>
          <p>The book starts by presenting you how to interact with some public OAuth 2.0 protected APIs such as Facebook, LinkedIn and Google. Readers will also be able to implement their own OAuth 2.0 provider with Spring Security OAuth2. Next, the book covers practical scenarios regarding some important OAuth 2.0 profiles such as Dynamic Client Registration, Token Introspection and how to revoke issued access tokens. Readers will then be introduced to the usage of JWT, OpenID Connect, and how to safely implement native mobile OAuth 2.0 Clients.</p>
          <p>This book is available from <a href="https://www.packtpub.com/virtualization-and-cloud/oauth-20-cookbook">Packt</a> and <a href="https://www.amazon.com/dp/178829596X?tag=oauthnet-20">Amazon</a>.</p>
        </div>
      </div>

      <div class="book-row" id="cloud-native-data-security-with-oauth">
        <div class="left">
          <a href="https://curity.io/resources/documents/cloud-native-data-security-oauth/" class="noprintexpand"><img src="cloud-native-data-security-with-oauth.jpg" alt="Cloud Native Data Security with OAuth" title="Cloud Native Data Security with OAuth"></a>
        </div>
        <div class="right">
          <p><a href="https://curity.io/resources/documents/cloud-native-data-security-oauth/"><i>Cloud Native Data Security with OAuth</i></a> by Gary Archer, Judith Kahrer, and Michał Trojanowski explores how to best design OAuth-based security for modern APIs and applications. The book dives deep into token design, authorization techniques, client security, and more. The book focuses on the cloud native world, but touches on architectural patterns valid for any OAuth-based systems. It comes with code examples that enable readers to easily try out the described solutions.</p>
          <p>This book is available for a limited time for free from <a href="https://curity.io/resources/documents/cloud-native-data-security-oauth/">Curity</a>. You can also access it through <a href="https://www.oreilly.com/library/view/cloud-native-data/9781098164874/">O'Reilly</a>, or buy on <a href="https://www.amazon.com/Cloud-Native-Data-Security-OAuth/dp/1098164881">Amazon</a>.</p>
        </div>
      </div>
    </div>
  </div>

<?php require('../../includes/_footer.php'); ?>
