Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Introduction
- Overview of OAuth.
- Understanding API security.
OAuth
- Protocol endpoints.
- Scope.
- Authorization code for web applications.
- Implicit flow for single-page applications.
- Client credentials for machine-to-machine communication.
- Resource owner password credentials.
- Extended access via refresh tokens.
- Selecting the appropriate response mode.
- Simplifying OAuth with OAuth 2.1.
Best Practices for Native Applications
- Distinct challenges of native apps.
- Utilizing PKCE to mitigate token theft.
- Selecting the optimal redirect URI.
Best Practices for Browser-Based Applications
- Security profile of browser-based applications.
- Implementing OAuth within the browser.
- Preventing OAuth vulnerabilities with SameSite cookies.
- Enhancing security for browser-based apps using 'backend-for-frontend' architecture.
Extending OAuth
- OAuth and Identity Management with OpenID Connect.
- Configuring clients using OAuth metadata.
- Authorizing IoT devices via the OAuth device flow.
- Integrating SAML and OAuth with the SAML assertion grant.
- Securing Microservices through token exchange.
Summary and Next Steps
Requirements
- Fundamental knowledge of web service and API development.
Target Audience
- Developers.
7 Hours
Testimonials (4)
The trainer was helpful..
Attila - Lifial
Course - Compliance and the Management of Compliance Risk
learning about Basel
Daksha Vallabh - Standard Bank of SA Ltd
Course - Basel III – Certified Basel Professional
Risk optimization is more clear than the other subjects
Munirah Alsahli - GOSI
Course - CGEIT – Certified in the Governance of Enterprise IT
The knowledge and understanding of the trainer on the training material was exceptional. The trainer was well aware of the subject, provided practical examples in relevance. I would highly recommend him as a trainer for this training.