Search

Lessons (2)

• Authentication, Authorization & API Security

  Who are you and what are you allowed to do? Sessions vs JWT, OAuth 2.0 and OpenID …

• API Contracts, Gateways and Security

  … but still need expiry, rotation and revocation strategy. OAuth delegates consent, SSO centralizes identity, and RBAC maps roles …