Protect Your APIs with OAuth - Developer Day 2021 Labs
Hands-on lab configuring OAuth server to protect APIs using access tokens. Learn to adjust token lifetimes, create custom scopes, add custom claims, and understand token validation implications.
Protecting Your APIs with OAuth
Discover OAuth 2.0 for API security, learn common flows, explore token types, and understand best practices to protect your APIs effectively.
OAuth and OpenID Connect in Plain English
Comprehensive guide to OAuth 2.0 and OpenID Connect, explaining key concepts, flows, and best practices for secure authentication and authorization in web applications.
How to Understand Your API Quickly by Swagger
Explore API understanding with Swagger, covering design, security, testing, and best practices. Learn about Open API specifications, microservices, and vulnerability identification.
OAuth, OpenID Connect and .NET - The Good Parts
Explore OAuth and OpenID Connect essentials for .NET developers, focusing on key protocol flows, extensions, and recommended practices for implementing token-based security in modern applications.
OAuth Secret: Advanced Exploitation Techniques - NahamCon 2024
Explore advanced OAuth exploitation techniques beyond simple redirect_uri attacks. Learn to chain multiple vulnerabilities for successful account takeovers in modern web applications.
Deconstructing Control Plane Compromise Attacks in Cloud Environments
Explore cloud control plane compromise attacks, learn how hackers exploit architectural flaws, and discover strategies for identifying and mitigating risks in your cloud environment.
PHP and JSON Web Token (JWT) Integration Tutorial
Learn to integrate JSON Web Tokens (JWTs) into PHP APIs using PSR 15 middleware. Demystify JWTs and enhance API security with practical implementation guidance.
OAuth 2.0 - It's the Implementation, Stupid
Explore OAuth 2.0 implementation, covering key concepts, grant types, and security considerations for robust authentication and authorization in web applications.
Winter is Coming - Cloud Security in Dark Ages
Explore top cloud security concerns, control panels, reliability, APIs, firewalls, redundancy, encryption, logging, and monitoring in this comprehensive overview.
Passwordless Authentication Tutorial - Implementing Email-Based Login with React Native
Learn to implement passwordless authentication in React Native using email OTPs. Covers AWS SES integration, secure login flows, and user interface design for a seamless, password-free experience.
Secure Secrets Management - Leveraging Laravel with HashiCorp Vault
Master secure secrets management by integrating Laravel with HashiCorp Vault to protect sensitive data like API keys and passwords while building robust web applications with enhanced security features.
Kubernetes SIG Auth Deep Dive
Explore Kubernetes authentication, authorization, and security features with experts from Google, Microsoft, and Red Hat. Learn about ongoing projects and opportunities for involvement in SIG Auth.
DevOps, CI, APIs, and Security Gone Agile
Explore agile security practices for modern IT environments, covering infrastructure, apps, APIs, and source code. Learn to adapt security processes to rapid deployment cycles and DevOps methodologies.
Using Workload Identity Federation to Increase Developer Productivity
Explore secure API token management using Kubernetes features like Service Account Token Volume projection and Workload Identity Federation for enhanced developer productivity.
Authorization in Software - How Box Does Authorization
Explore Box's multi-layered approach to authorization, covering security challenges, user permissions, and API access in file-sharing and collaboration platforms.
Securing LLMs in Kubernetes - Best Practices
Explore best practices for securing and operating Large Language Models in Kubernetes, including deployment, ingress control, and protection against data leakage in production environments.
Securing Azure OpenAI Apps in the Enterprise
Explore core security controls for Azure OpenAI in enterprises. Learn available measures, identify gaps, assess effectiveness, and implement robust protection strategies.
Cyber Security Fundamentals and Best Practices for Software Development
Master essential cybersecurity practices for modern software development, from threat assessment and incident response to secure system architecture, encryption protocols, and fostering a security-conscious development culture.
API Security in the Age of Microservices
Explore API security challenges in microservices architectures and learn strategies for distributed security, including gateways, service mesh, authentication, and network segmentation.
OAuth2 - Ready or Not - Here I Come
Explore OAuth2 protocol's security implications, implementation challenges, and best practices for secure authentication and authorization in modern web applications.