Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Introduction
- Overview of OAuth.
- Understanding API security.
OAuth
- Protocol endpoints.
- Scope.
- Authorization code for web applications.
- Implicit flow for single-page applications.
- Client credentials for machine-to-machine communication.
- Resource owner password credentials.
- Long-lived access via refresh tokens.
- Selecting the appropriate response mode.
- Simplifying OAuth with OAuth 2.1.
Best Practices for Native Applications
- Unique issues concerning native applications.
- Utilizing PKCE to manage stolen tokens.
- Choosing the optimal redirect URI.
Best Practices for Browser-based Applications
- The security profile of browser-based applications.
- Implementing OAuth within the browser.
- Avoiding OAuth pitfalls with SameSite cookies.
- Securing browser-based applications using backend-for-frontend patterns.
Extending OAuth
- Identity management with OpenID Connect.
- Configuring clients using OAuth metadata.
- Authorizing IoT devices via the OAuth device flow.
- Combining SAML and OAuth through the SAML assertion grant.
- Securing microservices via token exchange.
Summary and Next Steps
Requirements
- Foundational knowledge of web service and API development.
Audience
- Developers.
7 Hours
Testimonials (4)
The trainer was helpful..
Attila - Lifial
Course - Compliance and the Management of Compliance Risk
The report and rules setup.
Jack - CFNOC- DND
Course - Micro Focus ArcSight ESM Advanced
learning about Basel
Daksha Vallabh - Standard Bank of SA Ltd
Course - Basel III – Certified Basel Professional
Speed of response and communication