Authorization - Security Deep-Dive with Okta - Part 2
Explore authorization concepts like access control and delegated authorization. Learn practical security tips for React Native apps, balancing user experience with robust protection against malicious forces.
Adventures in Authentication and Authorization
Explore Netflix's journey in implementing authentication and authorization for microservices, discussing technology choices, challenges, and innovative solutions for a robust zero-trust ecosystem.
Authentication as a Microservice - Portable Customer Identity Management
Explore microservice-based authentication, portable identity management, and JWT security. Learn advantages, pitfalls, and best practices for decoupling user data in modern applications.
Common REST API Security Pitfalls
Explore common REST API security pitfalls, their root causes, and best practices for protection. Learn to assess and improve API security for robust, future-proof applications.
Modern and Secure IAM for Modern Applications
Explore modern IAM strategies for enhanced application security, covering OpenID, JSON Web Tokens, SAML, and FIDO protocols, with practical insights and a demo.
OAuth 2.1 and Beyond
Explore modern OAuth techniques for enhanced security, including strong client authentication, proof-of-possession tokens, and hardened authorization requests.
JWT - To Authentication & Beyond
Explore JSON Web Tokens for smart, self-contained authentication in distributed systems. Learn claims, use cases, and best practices for secure and efficient token management.
JWT JKU and X5U Equals Love
Explore JWT vulnerabilities related to jku and x5u headers, understanding potential security risks and exploitation techniques in web applications.
Knock Knock, Who's There? Authenticating Your Single Page Apps Using JSON Web Tokens
Explore authentication challenges in single page apps and learn how to implement secure solutions using OpenID Connect and JSON Web Tokens for seamless user experiences.
From Zero to Microprofile Hero - Let's Dive into a Microservices World
Hands-on exploration of MicroProfile for building efficient, portable microservices in Java. Learn key features like monitoring, security, configuration, and resilience through live coding examples.
Stateless with JWT - JSON Web Token
Explore stateless authentication with JWT, learning its benefits, implementation, and security considerations for modern REST architectures and scalable API design.
Secure Microservices Made Easy with MicroProfile JWT
Learn to secure microservices using MicroProfile JWT, including design overview and live demo on Open Liberty. Explore token-based security propagation for efficient service-to-service communication.
Implementing Microservices Security Patterns & Protocols
Comprehensive guide to securing microservices using industry-standard protocols and Spring Security 5.1, covering OAuth2, OpenID Connect, JWT, and more for robust application security.
Securing Microservices - A Practical Guide
Practical guide to securing microservices using Game On! as an example. Covers OAuth2, OpenID Connect, social sign-on, and dev/production parity for distributed systems.
Microservices for the Masses with Spring Boot, JHipster, and JWT
Learn to build and secure microservices using Spring Boot, JHipster, and JWT. Explore deployment options, API gateways, and modern tools like Docker and Kubernetes in this code-heavy presentation.
Secure Microservices Made Easy with MicroProfile JWT
Learn to secure microservices using MicroProfile JWT. Explore token-based security propagation, understand the design, and see a live demo of microservices communication on Open Liberty.
One Does Not Simply Log In - SSO for Web APIs
Explore OAuth2, OpenID Connect, and JWT for secure authentication in distributed systems. Learn practical solutions using JBoss Keycloak for modern web API security challenges.
Secure Microservices Made Easy with MicroProfile JWT
Explore MicroProfile JWT for secure microservices communication. Learn design principles and see a live demo of token-based authentication between services using Open Liberty.
Spring Security for N00bz - A Quick Introduction for the Terminally Insecure
Comprehensive introduction to Spring Security, covering defense-in-depth strategies and live coding demonstrations for securing applications using open-source tools.
Designing Secure APIs
Improve API security design using tools and guidelines. Learn about JSON complexities, schemas, JWTs, rate-limiting, and enforcing rules with OpenAPI and static analysis tools.
Three New Attacks Against JSON Web Tokens
Discover three novel attacks on JSON Web Tokens, exploring vulnerabilities in authentication and session management. Gain insights into cryptographic design flaws and complexity issues in JWT implementations.