The Secrets of OAuth 2.0 Part 1/2
Explore OAuth 2.0's history, differences from OAuth 1, authentication vs. authorization, grant types, token management, and PKCE in this expert interview on secure API access.
The Secrets of Advanced OAuth 2.0
Explore advanced OAuth 2.0 concepts with experts Aaron Parecki and Eric Johnson. Learn about secure API access, authorization frameworks, and implementing OAuth 2.0 servers for enhanced web security.
Next Generation OAuth Support with Spring Security 5
Explore OAuth 2.0 and OpenID Connect 1.0 support in Spring Security 5, focusing on OAuth 2.0 Login feature implementation and custom user authority mapping for enhanced authorization.
How to Secure Your Spring Apps with Keycloak
Learn to secure Spring applications using Keycloak, an open-source identity and access management solution. Explore authentication protocols, features, and integration scenarios for centralized identity management.
Bringing Together OpenAPI 3 and Spring Boot
Explore springdoc-openapi's key features for generating OpenAPI 3 documentation in Spring Boot projects, including integration with various Spring frameworks and microservices architecture.
Introduction to OAuth 2.0 and OpenID Connect
Comprehensive exploration of OAuth 2.0 and OpenID Connect protocols, covering authentication, authorization, and secure API access for modern web applications.
MAX - Realtime Messaging and Activity Stream Engine
Explore MAX, an open-source real-time messaging API built on Pyramid, powering a social intranet for 30,000+ users at BarcelonaTech University with high scalability and performance.
Getting to Know Your Users
Explore user authentication methods, from Basic Auth to OAuth 2.0 and OpenID Connect. Learn best practices, compare identity providers, and understand when to implement each for optimal user experience.
Managing Enterprise and Consumer Identity with Azure Active Directory
Explore Azure AD's identity management capabilities for enterprises and consumers, covering B2B collaboration, B2C scenarios, and custom user experiences with social identity integration.
IdentityServer4 - New & Improved for ASP.NET Core
Explore the latest enhancements in IdentityServer4 for ASP.NET Core, focusing on improved token-based security systems and OpenID Connect & OAuth 2.0 framework implementation.
IdentityServer4 - New & Improved for ASP.NET Core
Explore IdentityServer4's enhancements for ASP.NET Core, including improved OpenID Connect & OAuth 2.0 implementations. Learn about new features and architectural improvements in token-based security systems.
Authorization for Modern Applications
Explore modern application authorization strategies, focusing on separating identity, permissions, and business logic using PolicyServer for scalable and maintainable security architecture.
Implementing OpenID Connect and OAuth 2.0 – Tips from the Trenches
Architectural patterns for identity & access control using OpenID Connect and OAuth 2.0, addressing common challenges in token-based systems for modern applications.
Deep Dive into OAuth 2.0
Explore the intricacies of OAuth 2.0, the industry-standard authorization protocol, and its applications across various platforms and devices.
OAuth2 Authentication with Spring Security 6.4 Rest Client - A Complete Implementation Guide
Master OAuth2 authentication implementation with Spring Security 6.4's RestClient support through hands-on development of authorization server, resource server, and client applications using Spring Boot 3.4's latest features.
One for Auth and Auth for One - Authentication and Authorization Crash Course
Explore authentication and authorization in modern apps, covering OAuth 2.0 and OIDC standards. Learn key concepts and practical applications for robust user and API security.
OAuth and the Long Way to Proof of Possession
Explore the evolution of OAuth 2.0's proof of possession, from its omission to current implementation methods. Learn about sender constraining and its importance in modern security practices.
The Insecurity of OAuth 2.0 in Frontends
Explore XSS threats in OAuth 2.0 frontends, assess real-world attacker capabilities, and learn effective defense strategies for securing your applications against advanced attacks.
OAuth and Proof of Possession - The Long Way Round
Explore OAuth's evolution, focusing on proof of possession mechanisms, token binding, and mutual TLS. Learn about industry developments and practical implementations for enhanced security.
Abusing OIDC Authentication for Cloud Security Vulnerabilities
Dive into OIDC security vulnerabilities, exploring authentication mechanisms, potential misconfigurations, and real-world attack vectors in cloud environments through CI/CD workflows and identity providers.
One Auth to Rule Them All - Centralizing Authentication with Azure and API Gateway
Discover how to centralize authentication across applications using Azure SSO and AWS API Gateway, featuring practical insights on implementation challenges and developer adoption strategies.