Who Are You? Delegation, Federation, Assertions and Claims
Explore protocols for delegating identity management, including SAML, OAuth, and OpenID Connect. Learn about single sign-on, authentication issues, and considerations for implementing these solutions.
Why You Shouldn't Care About Security
Explore OAuth and OpenID Connect for simplified API security. Learn about claims, scopes, and integrating Auth0 with API platforms to streamline development and focus on core functionality.
Levelling Up Your Web Scraping Game
Learn advanced web scraping techniques, from headless browsers to handling edge cases, with practical demos and tips for overcoming anti-scraping measures and accessing mobile APIs.
JWT - To Authentication & Beyond
Explore JSON Web Tokens for smart, self-contained authentication in distributed systems. Learn claims, use cases, and best practices for secure and efficient token management.
Ways to Die in Mobile OAuth
Comprehensive analysis of OAuth vulnerabilities in mobile apps, revealing widespread implementation flaws and security risks. Offers insights for developers to enhance mobile OAuth security.
OAuth for Beginners
Einführung in OAuth: Funktionsweise, Vorteile und Implementierungstipps für Entwickler. Grundlegende Konzepte und Best Practices für sichere Authentifizierung und Autorisierung in Webanwendungen.
Top X OAuth 2 Hacks
Esplorazione delle vulnerabilità e degli errori comuni nell'implementazione di OAuth 2, con focus sulle best practice per garantire un accesso sicuro alle API REST.
Securing Your APIs with OAuth 2.0
Learn to secure APIs using OAuth 2.0, covering JWT access tokens, scope design, and microservices architecture. Gain insights on authorization protocols, multi-factor auth, and backend service separation.
OAuth - When Things Go Wrong
Explore common OAuth security threats, high-profile breaches, and best practices for protecting microservices. Learn implementation patterns and latest IETF OAuth working group recommendations.
What the Heck is OAuth and OIDC
Explore OAuth and OpenID Connect: Learn their functionality, use cases, and implementation frameworks for secure authorization and authentication in modern applications.
OAuth All the Things - What Is OAuth 2.0?
Comprehensive introduction to OAuth 2.0, covering various flows, use cases, and implementation details for developers building secure authentication systems.
In the World of Password123, Be Someone's #@%^)*!
Explore modern authentication methods, including multi-factor authentication, single sign-on, and federated authentication. Learn about OAuth and OIDC to enhance application security.
Securing APIs and Microservices with OAuth and OpenID Connect
Learn how OAuth and OpenID Connect can create a unified, distributed framework for securing microservices, enhancing agility and scalability in API deployments.
Introduction to OAuth 2.0 and OpenID Connect
Comprehensive overview of OAuth 2.0 and OpenID Connect, exploring delegation frameworks, authentication, and access control in modern web applications.
IAM Concerned - OAuth Token Hijacking in Google Cloud
Explore OAuth token hijacking vulnerabilities in Google Cloud, understanding attack vectors and mitigation strategies for enhanced GCP environment security.
OAuth vs. SAML vs. OpenID Connect
Explore key identity federation protocols: OAuth, SAML, and OpenID Connect. Compare features, security levels, and use cases to make informed decisions for your application's single sign-on implementation.
Be Ready for BeyondCorp - Enterprise Identity, Perimeters and Your Application
Explore BeyondCorp's enterprise security model, focusing on user and device authentication, access control, and implementation in open-source web applications using tools like SAML and Django.
Beautiful Payment Systems with OAuth
Explore secure and elegant payment system design using OAuth, focusing on best practices and implementation strategies for developers.
Oauth Third Party Not Departing
Explore OAuth vulnerabilities and security risks in third-party integrations, focusing on potential exploits and mitigation strategies for robust authentication systems.
Spring Security for N00bz - A Quick Introduction for the Terminally Insecure
Comprehensive introduction to Spring Security, covering defense-in-depth strategies and live coding demonstrations for securing applications using open-source tools.
Securing the OAuth and OpenID Connect Front-Channel
Explore Pushed Authorize Requests (PAR) in OAuth, enhancing security by adding client authentication and removing request parameters from URLs, improving user experience and enabling new scenarios.