WebinarHarden Data Security with Non-Human Identities - Register for webinar!
Curity logo
  • Contact us
  • Search
  • Schedule a Demo
  • Start Free Trial
ArticlesGetting StartedHow-tosGuidesCode ExamplesDocumentationVideosWebinarsCoursesTrainingDocuments
What's newRSS

APIs and ClientsAPIs and Clients

  • APIs
    • Securing a Spring Boot API with JWTs
    • Securing a Java API with JWTs
    • Securing a Kotlin API with JWTs
    • Securing a .NET API with JWTs
    • Securing a Go API With JWTs
    • Securing a Node.js Express API with JWTs
    • Securing a Python Flask API with JWTs
    • Securing a Symfony API with JWTs
    • Securing a Serverless API with JWTs
    • Securing a Serverless API on Vercel using JWTs
    • Mutual TLS Secured API
    • API Access via JWT Assertions
    • Securing API Events using JWTs
    • Testing Zero Trust APIs
  • Single Page Apps
    • SPA using Token Handler
    • Token Handler Deployment Example
    • Javascript SPA using Assisted Token Flow
    • Javascript SPA using OAuth Assistant Library
    • Javascript SPA using Code Flow + PKCE
    • React SPA using Assisted Token Flow
    • Angular SPA using Assisted Token Flow
    • Hypermedia Authentication API React Demo
  • Websites
    • OpenID Connect Client with Spring Security
    • OpenID Connect Client with .NET
    • OpenID Connect Client with .NET Framework
    • OpenID Connect Client with Node.js Express
    • OpenID Connect Client with Python
    • OpenID Connect Client with Java Undertow
    • OpenID Connect Client with MITREid
    • OpenID Connect Client with Mutual TLS
    • OpenID Connect Client with Encrypted ID Tokens
  • Mobile Apps
    • Kotlin Android App using AppAuth
    • Kotlin Android App using HAAPI
    • Swift iOS App using AppAuth
    • Swift iOS App using HAAPI
    • React Native App using HAAPI
    • Mobile Dynamic Client Registration
    • Mobile Web SSO
    • Mobile Setup with ngrok

PluginsPlugins

  • Alarm Handlers
    • Alarm Integration Plug-in
  • Authenticators
    • Bitbucket Authenticator
    • Box Authenticator
    • Criipto Authenticator
    • Dropbox Authenticator
    • Entrust Authenticator
    • Freja eID Authenticator
    • GitHub Authenticator
    • Instagram Authenticator
    • LinkedIn Authenticator
    • Nonce Authenticator
    • reCAPTCHA Authenticator
    • Salesforce Authenticator
    • Slack Authenticator
    • StackExchange Authenticator
    • Twitter Authenticator
    • Username Password Authenticator
    • Windows Live Authenticator
  • Authentication Actions
    • Choose Account Authentication Action
    • Debug Attribute Authentication Action
    • Redirect Action Example
    • Send Email Action Example
    • Time Based Deny Authentication Action
    • Kong Dev Portal User Provisioner
    • Azure API Management User Provisioner
    • Microblink BlinkID Authentication Action
    • iProov Authentication Action
  • Data Access
    • PBKDF2 Credential Data Access Plugin
    • RESTful Data Access Plugin
  • Claims Providers
    • Salesforce Claims Provider
  • Consentors
    • Example Generic Consentor
  • Emailers
    • RESTful Emailer Plug-in
    • Twilio SendGrid Emailer Plugin
  • Event Listeners
    • Amazon SQS Event Listener
    • Apigee Token Publisher Event Listener
    • Apigee Split Token Publisher Event Listener
    • AWS Split Token Publisher Event Listener
    • Client Authentication Attempt Counter
    • Cloudflare Token Publisher Event Listener
  • SMS Senders
    • RESTful SMS Sender Plugin
    • Tele2 SMS Plugin
  • Authorization Managers
    • XACML Authorization Manager
    • Open Policy Agent Authorization Manager
    • AuthZEN Authorization Manager
  • Token Procedures
    • Long-Lived Tokens on Refresh Procedure Plugin
    • Exchange Opaque Token to JWT
    • OpenID AuthZEN Token Procedure

Learn MoreLearn more

  • Webinars
  • Documents
  • Videos
Token Procedures

Token Procedures

Example implementations of Token Procedure plugins. Examples of procedures that alter responses from the token endpoint in different OAuth and OpenID Connect flows.

Long-Lived Tokens on Refresh Procedure Plugin

Long-Lived Tokens on Refresh Procedure Plugin

A token procedure plugin example that adds features to the token refresh flow. It can also be used as an example of writing token procedure plugins.

Exchange Opaque Token to JWT

Exchange Opaque Token to JWT

An example of how to implement a Token Exchange (RFC 8693) plugin. In this example an opaque token is exchanged into a JWT.

OpenID AuthZEN Token Procedure

OpenID AuthZEN Token Procedure

A Token Procedure example using an AuthZEN PDP to determine if tokens should be issued

Next steps

Ready to modernize IAM?

Start Today - Build security and improve ease of use to stay ahead of the competition.

Free trial icon representing Start a free trial

Start a Free Trial

Calendar icon representing Schedule a demo

Schedule a demo

User with a computer icon representing Speak to an Identity Specialist

Speak to an Identity Specialist

Book icon representing Explore learning resources

Explore learning resources

footer lines
Curity logo

info@curity.io

Get in touch

  • X icon
  • LinkedIn icon
  • YouTube icon
  • Bluesky icon
  • GitHub icon
  • Subscribe to Curity's RSS Feeds icon
  • Medium icon
  • Nordic APIs icon
Sign up for API Security Insights.

© Curity AB Terms of Service

Product

  • Product Overview
  • Authentication Service
  • Token Service
  • User Management Service
  • Curity Token Handler
  • Authentication
  • Secure Acccess
  • User Journey Orchestration
  • Decentralized Identity
  • Extensibility and SDK:s
  • Identity Standards
  • Community Edition
  • Product Plans
  • FAQ
  • Support
  • Deployment
  • DevOps and Secops

Solutions

  • Overview
  • Common Identity Platform
  • Modernizing Infrastructure
  • Open Banking & Financial-Grade APIs
  • Secure Frictionless Authentication
  • Zero Trust and Security Architecture
  • Government
  • Healthcare
  • Telecom
  • Financial Services
  • Technology / SaaS

Resources

  • Resource Library
  • What's New
  • Articles
  • Getting Started
  • How-tos
  • Code Examples
  • Webinars
  • Whitepapers
  • Documents
  • Videos
  • Courses
  • OAuth Tools

Company

  • About
  • Customers
  • Partners
  • Blog
  • Careers
  • Events Calendar
  • ESG
  • News
  • Investor Relations
Security ScoreCardSOC 2 Type 1 Compliance
observatory: A+ (100/100)observatoryobservatoryA+ (100/100)A+ (100/100)
SSL: A+ SSL SSL A+ A+