Token Based Security – The overall flow
In this video I cover the overall flow of how token based security works. This is just a high level overview and does not focus on implementation.
We look at what a Security Token Service is, as well as Identity Providers and how they tie into the generation of tokens. We also look at refresh tokens and how they help limit the amount of damage a hacker can do to your API.
If anyone is interested in another video I can show how this is implemented using .NET and Web API.
source
