Are You Safe from OWASP #11? - Creating a Successful API Security Program
Explore API security beyond Top 10 lists, focusing on building a comprehensive program at scale. Learn key strategies for successful API protection and management.
Integrating Identity into APIs with Okta and Kong - Developer Day 2021
Discover powerful authentication and authorization scenarios using Kong and Okta. Learn to implement sophisticated API access and management flows with OIDC and OAuth, including CI/CD pipeline integration.
A Beginner's Guide to Building a Secure Website
Learn to build secure websites using OAuth and OpenID Connect. Covers authorization flows, client registration, PKCE, and includes live coding demonstrations for practical implementation.
Leveraging Sigstore Capabilities in a Local Environment
Explore Lockheed Martin's integration of Sigstore for secure, auditable software development. Learn about internal Kubernetes deployments, certificate authorities, and streamlined GitLab pipelines for enhanced security.
Fundamentals of API Security with Python
Dive into API security for Python apps. Learn authentication, authorization, OWASP top 10 vulnerabilities, OAuth, OIDC, JWTs, and automated security testing. Practical examples using Flask and FastAPI.
Permission to Hack You - Illicit Consent Grant Attack
Explore the Illicit Consent Grant Attack, a sophisticated technique exploiting OAuth permissions in Azure AD. Learn how attackers manipulate consent to gain unauthorized access to sensitive resources.
Exploiting Token-Based Authentication: Attacking and Defending Identities in the 2020s
Explore token-based authentication vulnerabilities and defense strategies for modern identity systems in this insightful cybersecurity talk by Dr Nestori Syynimaa at TROOPERS24.
A JavaScript Developer's Guide to Identity
Learn essential identity access and security concepts for JavaScript developers to protect user information and enhance application safety.
YouTube Analytics and Data API with Python - May 2022 Update
Learn to use YouTube Analytics and Data APIs with Python, covering setup, authentication, data retrieval, and creating CLI tables. Gain practical skills for working with Google's latest API libraries.
Custom Signup Flow in Clerk - Authentication Implementation Tutorial
Master custom signup flows in Clerk with step-by-step guidance on implementing user authentication and registration processes for web applications.
React Social Login with Passport.js - React OAuth with Google, Facebook, Github
Learn to implement social media login authentication in React using Passport.js. Covers Google, Facebook, and GitHub integration, with step-by-step guidance on designing and routing.
Working with Application-Based OAuth 2.0 and 3-Legged Authorization
Discover how to implement 3-legged authorization using OAuth 2.0 for applications in this demo, covering configuration, console changes, and request flow analysis.
Setting up GitHub OAuth for Login and Redis Sessions - Day 4
Implement GitHub OAuth login with Redis sessions. Learn to set up user authentication, persist sessions, and integrate with web applications for secure access control.
ASP.NET Core Custom OAuth Server - .NET 7 Minimal APIs C#
Learn to build a custom OAuth server in ASP.NET Core using .NET 7 Minimal APIs. Implement JWT token creation, authorization endpoints, and PKCE for enhanced API security and extensibility.
ASP.NET Core OAuth Authorization - .NET 7 Minimal APIs C#
Learn OAuth authorization in ASP.NET Core using .NET 7 Minimal APIs. Implement secure user access to external APIs, focusing on YouTube integration, with step-by-step guidance and practical examples.
ASP.NET Core External Authentication - OAuth, .NET 7 Minimal APIs C#
Explore OAuth-based external authentication in ASP.NET Core using minimal APIs. Learn to configure clients, handle callbacks, manage tokens, and implement Facebook authentication.
Authentication Landscape in 2022 - ASP.NET Core Examples
Comprehensive overview of modern authentication methods for web and native apps, covering identity management, OAuth, OIDC, and SSO with practical insights for developers.
ASP.NET Core 3 - OAuth - Securing the API - Episode 7
Explore securing API resources in ASP.NET Core 3 using OAuth, including access tokens, authorization policies, and HTTP client configuration for secure API access.
ASP.NET Core 3 - OAuth Client Implementation - Episode 6
Learn to implement OAuth client authentication in ASP.NET Core 3, including token handling, callback paths, and claim management for secure web applications.
OAuth and Mandatory Access Control: Beyond Discretionary Access Control - Lecture 4
Explores OAuth's limitations in mandatory access control, discussing industry extensions and the need for standardization beyond RBAC for comprehensive security policy enforcement.
Authorization in Microservices World - Kubernetes, ISTIO and Open Policy Agent
Explore fine-grained authorization in microservices using Open Policy Agent, integrated with Kubernetes and ISTIO. Learn challenges and solutions for enforcing programmatic authorization in cloud-native environments.