API Security Blogs

Categories

Results 19-21 of 21 for API Security

OAuth 2 Access Token Usage Strategies for Multiple Resources (APIs): Part 1

Robert Broeckelmann

Apr 18, 2019
When an application consumes a variety of different APIs, often all endpoints require an OAuth 2 access token issued from a common Identity Provider, with appropriate security token checks in place. Gain an understanding of three primary approaches for best employing OAuth 2 access tokens.

Go with the Flow, OAuth 2.0

Anthony Dombrowski

Mar 19, 2019
Easily visualize the various stages of the OAuth 2.0 protocol, one of the most popular authorization standards, with this creative analogy. By breaking it down into 3 phases and 4 fun characters, the author helps you better understand the OAuth flow.

Securely Using the OIDC Authorization Code Flow and a Public Client with Single Page Applications

Robert Broeckelmann

Oct 11, 2018
The use of the OAuth2 Authorization Code Grant or OIDC Authorization Code Flow with a Public Client with Single Page Applications (SPAs) is on the rise. Learn why.