Code Examples
Our code examples show how to secure access to your APIs, integrate OAuth flows into UIs, and extend the capabilities of the Curity Identity Server via plugins.

Choose Account Authentication Action
An Authentication Action that allows the user to choose which SSO session they want to log in with.
Testing Zero Trust APIs
How to reduce infrastructure when writing integration tests against OAuth secured APIs
Long-Lived Tokens on Refresh Procedure Plugin
A token procedure plugin example that adds features to the token refresh flow. It can also be used as an example of writing token procedure plugins.
Nonce Authenticator
An authenticator that enables SSO navigation from a source to a target application, when SSO cookies cannot be used
Open Policy Agent Authorization Manager
Implementing an Open Policy Agent (OPA) Authorization Manager
OpenID Connect Client with .NET
A website example in .NET that illustrates how to integrate with OpenID Connect.
.NET OAuth Agent
A .NET OAuth Agent that enables strong browser security for SPAs
Kotlin OAuth Agent
A Kotlin OAuth Agent that enables strong browser security for SPAs
Mobile Web SSO
How to achieve SSO when navigating from a mobile app to a web view or browser
XACML Authorization Manager
Implementing a XACML Authorization Manager
Hypermedia Authentication API React Demo
A React demo application using the Hypermedia Authentication API
Securing API Events using JWTs
Secure and reliable event based messaging with Apache Kafka and the Curity Identity Server
Next.js OAuth Agent
An OAuth Agent that enables strong browser security for SPAs, implemented using Next.js
API Access via JWT Assertions
Designing APIs whose clients must authenticate with strong security via client assertions
Token Handler Deployment Example
Details of how the code example and its token handler is deployed
Entrust Authenticator
An authenticator that allows an integration of the Curity Identity Server with the Entrust IDaaS.
BehavioSec Authenticator
An authenticator that uses behavioral data as a second factor to authenticate users.
Financial-Grade OAuth Agent
An OAuth Agent that enables financial-grade security for SPAs
Node.js OAuth Agent
A Node.js and Express OAuth Agent that enables strong browser security for SPAs
Twilio SendGrid Emailer Plugin
Emailer plugin that uses the Twilio SendGrid Email API to send emails.