Secure Single Page Applications: Cookie Security with the Token Handler

Single Page Applications (SPAs) offer powerful options for a modern web architecture. They ensure efficient developer experience for rapid time to market, and a fast and responsive user interface. SPAs often use OAuth 2.0 and OpenID Connect security standards which enables them to send access tokens to secured APIs.

Yet you must also protect against malicious JavaScript threats like token exfiltration. Designing the best security and ensuring no adverse effects is difficult for web developers. Enter the token handler pattern.

In this webinar, identity security experts Gary Archer and Jonas Iggbom will explain how to:

• Add cookie security to single page applications using utility APIs compatible with any standards-based authorization server
• Retain all SPA architecture benefits without writing cookie-related code
• Use a best-of-breed implementation developed by experts that includes support for development and DevOps teams

The webinar includes a Q&A session with Curity's CTO, Jacob Ideskog, so make sure to catch the session live to ask your burning questions.