HTTP Basic Authentication

https://roadmap.sh/guides/http-basic-authentication

Tokens

What Is A Token?

https://auth0.com/blog/refresh-tokens-what-are-they-and-when-to-use-them/#token-storage

https://youtu.be/EIYCJKR0I_g

ID Token -> OpenID Connect
Access Token -> API from app client / Bearer Token / JWT
Refresh Token

OAuth

OAuth 2.0 Playground

https://www.oauth.com/playground/index.html

RFC Oauth

https://www.rfc-editor.org/rfc/rfc6749

Client ID and Secret

https://www.oauth.com/oauth2-servers/client-registration/client-id-secret/

OAuth Grant Types: Explained

https://oauth.net/2/grant-types/

https://frontegg.com/blog/oauth-grant-types

https://athiththan11.medium.com/oauth-2-grant-types-a-story-guide-582580a3c4c2

https://aaronparecki.com/oauth-2-simplified/#web-server-apps

PKCE

https://www.rfc-editor.org/rfc/rfc7636#section-4.1

getting started

https://blog.avenuecode.com/getting-started-with-oauth-2.0-authorization-code-with-pkce

#SGVirtual 20.12 - OAuth 2 y OpenID Connect para mortales

https://youtu.be/nNVlewjKQEQ?list=PLHAED1NPcJs_inP1olZzq7-IqOCwQS4y1

Using OAuth 2.0 for Web Server Applications

https://developers.google.com/identity/protocols/oauth2/web-server