Videos

OAuth tools is an app for API developers to learn and explore the inner workings of the OAuth and OpenID Connect protocols.

In this recording, we take a look at how to configure it.

The Curity Token Handler is a Backend for Frontend (BFF) authentication solution that addresses browser-based authentication security concerns. With the Token Handler enables you to:

• Secure authentication without a firewall-protected backend
• Avoid lengthy and resource-heavy development
• Secure API calls in the browser
• Avoid cyber threats like token exfiltration and cross-site scripting (XSS)

Further reading:

• Modern Techniques for Securing SPAs
• Token Handler Design Overview
• SPA using Token Handler

A talk given by Curity's CTO, Jacob Ideskog, at the Nordic APIs 2024 Platform Summit.

How Single Page Applications Came, Conquered and Ruined the Day. We build APIs, not apps. Why should we care about what the application teams are doing? Please don’t ask us to look at the bigger picture.

Securing platforms is a massive task, where both the details and the big picture matter. We can rely on security standards such as OAuth and OpenID Connect, but if we don’t use the right tool for the right task, security is merely a hope. So it’s time to present the right tools for the right task and hopefully change hope into action.

Further Reading:

• Best Practices - OAuth for Single Page Applications
• SPA - Single Page Application Security
• Secure Single Page Applications by Preventing Token Theft

Blockchain is great but is it necessary to use it when implementing decentralized identity?

Further Reading:

• Decentralized Identifiers (DIDs) Explained
• Overview of Decentralized Identities
• Verifiable Credentials Explained
• Decentralized Identifiers and Verifiable Credentials: The Building Blocks for Self-Controlled Identities