Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Introduction
- Overview of OAuth.
- Understanding API security.
OAuth
- Protocol endpoints.
- Scope.
- Authorization code for web applications.
- Implicit flow for single-page applications.
- Client credentials for machine-to-machine communication.
- Resource owner password credentials.
- Long-lived access via refresh tokens.
- Selecting the appropriate response mode.
- Simplifying OAuth with OAuth 2.1.
Native Applications Best Practices
- Unique issues of native apps.
- Using PKCE to manage stolen tokens.
- Selecting the optimal redirect URI.
Browser-based Application Best Practices
- The security profile of browser-based applications.
- Implementing OAuth within the browser.
- Avoiding OAuth pitfalls with SameSite cookies.
- Securing browser-based apps with Backend for Frontend (BFF).
Extending OAuth
- OAuth and Identity via OpenID Connect.
- Configuring clients with OAuth metadata.
- Authorizing IoT devices using the OAuth device flow.
- Combining SAML and OAuth via the SAML assertion grant.
- Securing Microservices through token exchange.
Summary and Next Steps
Requirements
- Basic knowledge of web service and API development.
Audience
- Developers.
7 Hours
Testimonials (3)
The trainer was helpful..
Attila - Lifial
Course - Compliance and the Management of Compliance Risk
The report and rules setup.
Jack - CFNOC- DND
Course - Micro Focus ArcSight ESM Advanced
The way to receive the information from the trainer