OAuth Tokens As Your Identity API
Explore OAuth and OpenID Connect for secure, scalable identity management in distributed systems. Learn to leverage tokens for user permissions, tracing, and delegation across complex networks.
The Secrets of OAuth 2.0 Part 1/2
Explore OAuth 2.0's history, differences from OAuth 1, authentication vs. authorization, grant types, token management, and PKCE in this expert interview on secure API access.
The Accidental Discovery of a New Vulnerability in Google's OAuth Implementation
Discover a client impersonation vulnerability in Google's OAuth implementation, its implications for enterprise security, and lessons learned from this cautionary tale of cloud provider security.
You Shall Not Password - Modern Authentication for Web Apps
Explore modern web authentication beyond passwords, including SSO, 2FA, OAuth, and more. Learn the benefits, risks, and implementation of advanced security mechanisms for safer user logins.
Securing SPAs with Spring
Learn best practices for securing Single Page Applications using Spring Security, covering authentication, authorization, CORS, CSRF, and common attack prevention techniques.
How to Secure Your Node.js Containers on Kubernetes With Best Practices
Discover best practices for securing Node.js containers on Kubernetes, covering cluster protection, OIDC implementation, and application-specific security measures for robust DevOps deployments.
Lost in OAuth - Learn Velruse and Get Your Life Back
Explore Velruse, a Python library simplifying OAuth implementation for seamless third-party authentication in web applications. Gain practical insights to streamline your development process.
Implementing Authorization
Explore implementing robust authorization systems using Open Policy Agent, decoupling from authentication for fine-grained control and easier maintenance in various software environments.
Automation Engineering with Serverless Compute
Automate tedious processes using Ruby in serverless functions. Learn object detection, event triggers, and static site generation while exploring problem-solving techniques for overcoming challenges.
Modern Authentication
Unravel modern authentication concepts like OAuth, OpenIDConnect, and tokens. Learn how to implement secure, distributed application access without sharing passwords.
Facebook Development with ASP.NET and Microsoft Azure
Explore Facebook integration with ASP.NET and Azure, covering OAuth, user data capture, and social features. Learn to leverage Azure services for seamless Facebook app development.
Identity Server 4 with Angular and ASP.NET Core
Learn to secure APIs, connect Angular SPAs, and expose APIs to third parties using OAuth with Identity Server 4, ASP.NET Core, and Entity Framework in this demo-heavy presentation.
APIs Exposed
Explore API security risks and solutions, including cross-site scripting, BruteForce attacks, OAuth, access tokens, JSON web tokens, IP whitelisting, and rate limiting for robust endpoint protection.
Building Identity for a Zero Trust Network
Exploring Netflix's zero trust network architecture, focusing on identity-based security, adaptive authentication, and device health to create a cloud-first, open perimeter environment.
Azure DevOps Workload Identity Federation with Azure - No More Secrets
Eliminate secrets in Azure DevOps pipelines with workload identity federation. Learn OIDC, service connections, token flow, and managed identities for secure Azure authentication.
Fédérez votre OpenStack avec votre Fournisseur d'Identité - Implémentation et Configuration
Découvrez comment configurer et implémenter la fédération d'identité OIDC dans OpenStack, en mettant l'accent sur la scalabilité et l'intégration avec différents outils comme Horizon, APIs et Terraform.
Federated Authentication in Headless Environments - SAML and OIDC Implementation Challenges
Explore OIDC authentication implementation in headless environments, focusing on OpenStack client integration, security flows, and practical solutions for CLI-based authentication challenges.
GitHub Azure AD OIDC Authentication for Actions
Learn to authenticate GitHub Actions with Azure AD using OIDC, eliminating the need for stored secrets. Explore token exchange, subject types, app registration, and federated credentials for enhanced security.
OAuth – The Good Parts
Explore essential OAuth concepts, recommended protocol flows, and key extensions. Learn about OpenID Connect and get insights for further study in token-based security.
You Shall Not Password - Modern Authentication for Web Apps
Explore modern web authentication methods beyond passwords, including SSO, 2FA, OAuth, and FIDO2. Learn their benefits, limitations, and implementation for enhanced user security.
Rethinking Apache Kafka Security and Account Management - Centralized Identity Management
Explore centralized identity management for Apache Kafka, focusing on OAuth integration, security enhancements, and best practices for seamless access control across cloud and on-premises environments.