Code Examples
Our code examples show how to secure access to your APIs, integrate OAuth flows into UIs, and extend the capabilities of the Curity Identity Server via plugins.
Exchange Opaque Token to JWT
An example of how to implement a Token Exchange (RFC 8693) plugin. In this example an opaque token is exchanged into a JWT.
SPA using Token Handler
An example showing how to use token handler components to harden your SPA security
Token Handler Deployment Example
Details of how the code example and its token handler is deployed
iProov Authentication Action
An Authentication Action example which scans a user’s face for identity proofing.
Microblink BlinkID Authentication Action
An Authentication Action example which scans a users ID document for identity proofing.
Choose Account Authentication Action
An Authentication Action that allows the user to choose which SSO session they want to log in with.
Testing Zero Trust APIs
How to reduce infrastructure when writing integration tests against OAuth secured APIs
Long-Lived Tokens on Refresh Procedure Plugin
A token procedure plugin example that adds features to the token refresh flow. It can also be used as an example of writing token procedure plugins.
Nonce Authenticator
An authenticator that enables SSO navigation from a source to a target application, when SSO cookies cannot be used
Open Policy Agent Authorization Manager
Implementing an Open Policy Agent (OPA) Authorization Manager
OpenID Connect Client with .NET
A website example in .NET that illustrates how to integrate with OpenID Connect.
Mobile Web SSO
How to achieve SSO when navigating from a mobile app to a web view or browser
XACML Authorization Manager
Implementing a XACML Authorization Manager
Hypermedia Authentication API React Demo
A React demo application using the Hypermedia Authentication API
Securing API Events using JWTs
Secure and reliable event based messaging with Apache Kafka and the Curity Identity Server
API Access via JWT Assertions
Designing APIs whose clients must authenticate with strong security via client assertions
Entrust Authenticator
An authenticator that allows an integration of the Curity Identity Server with the Entrust IDaaS.
Twilio SendGrid Emailer Plugin
Emailer plugin that uses the Twilio SendGrid Email API to send emails.
Securing a Serverless API on Vercel using JWTs
Example of a JWT protected serverless API running on Vercel
Mutual TLS Secured API
How to implement client certificate based security in a B2B API
Join our Newsletter
Get the latest on identity management, API Security and authentication straight to your inbox.
Start Free Trial
Try the Curity Identity Server for Free. Get up and running in 10 minutes.
Start Free Trial