Building with APIs brings scalability and efficiency, but it can also introduce new vulnerabilities if security isn't considered from the start. As authentication and authorization have evolved from HTTP Basic Auth to API keys to OAuth 2.0, identity has become central to building mature, secure API platforms.
This ebook brings together top Nordic APIs articles on identity and API security, organized into three parts: foundational concepts and the API Security Maturity Model, a deep dive into OAuth flows and standards like SCIM, and the role of identity in high-risk sectors like IoT and financial-grade APIs.
Table of contents
Foreword — i
Preface — iii
Part One: Basic Identity Concepts — 1
Part Two: OAuth Flows and Deep Dives — 47
Part Three: The Role of Identity — 93
