Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Introduction
- Overview of OAuth.
- Understanding API security.
OAuth
- Protocol endpoints.
- Scope.
- Authorization code for web applications.
- Implicit flow for single-page applications.
- Client credentials for machines.
- Resource owner password credentials.
- Long-lived access with refresh tokens.
- Choosing the appropriate response mode.
- Simplifying OAuth with OAuth 2.1.
Native Applications Best Practices
- Unique issues of native applications.
- Using PKCE to handle stolen tokens.
- Choosing the best redirect URI.
Browser-based Application Best Practices
- The security profile of browser-based applications.
- OAuth within the browser.
- Avoiding OAuth with SameSite cookies.
- Securing browser-based applications with backend for frontend.
Extending OAuth
- OAuth and Identity with OpenID Connect.
- Configuring clients with OAuth metadata.
- Authorizing the Internet of Things (IoT) with the OAuth device flow.
- Combining SAML and OAuth with the SAML assertion grant.
- Securing Microservices with token exchange.
Summary and Next Steps
Requirements
- Basic knowledge of web service and API development.
Audience
- Developers.
7 Hours
Testimonials (4)
The trainer was helpful..
Attila - Lifial
Course - Compliance and the Management of Compliance Risk
The report and rules setup.
Jack - CFNOC- DND
Course - Micro Focus ArcSight ESM Advanced
learning about Basel
Daksha Vallabh - Standard Bank of SA Ltd
Course - Basel III – Certified Basel Professional
Risk optimization is more clear than the other subjects