Videos

In this recording, we take a look at testing with OAuth Tools.

The Curity Token Handler is a Backend for Frontend (BFF) authentication solution that addresses browser-based authentication security concerns. With the Token Handler enables you to:

• Secure authentication without a firewall-protected backend
• Avoid lengthy and resource-heavy development
• Secure API calls in the browser
• Avoid cyber threats like token exfiltration and cross-site scripting (XSS)

Further reading:

• Modern Techniques for Securing SPAs
• Token Handler Design Overview
• SPA using Token Handler

A talk given by Curity's CTO, Jacob Ideskog, at the Nordic APIs 2024 Platform Summit.

How Single Page Applications Came, Conquered and Ruined the Day. We build APIs, not apps. Why should we care about what the application teams are doing? Please don’t ask us to look at the bigger picture.

Securing platforms is a massive task, where both the details and the big picture matter. We can rely on security standards such as OAuth and OpenID Connect, but if we don’t use the right tool for the right task, security is merely a hope. So it’s time to present the right tools for the right task and hopefully change hope into action.

Further Reading:

• Best Practices - OAuth for Single Page Applications
• SPA - Single Page Application Security
• Secure Single Page Applications by Preventing Token Theft

How do decentralized identifiers (DIDs) and verifiable credentials (VC) work and how a decentralized identity system is different from a federated model?

Further Reading:

• Decentralized Identifiers (DIDs) Explained
• Overview of Decentralized Identities
• Verifiable Credentials Explained
• Decentralized Identifiers and Verifiable Credentials: The Building Blocks for Self-Controlled Identities