Technical articles, page 3
Hands-on pieces with configuration, protocol details and code-level advice.
Topics: Authorization · Cloud computing · Events & community · General · Identity & access management · Federation · Information security · Mobile security · Social login · News · Technical · Archives
- Authorization
Implementing Modern OAuth Techniques: PAR, DPoP and More
The OAuth 2.0 extensions worth adopting now: PKCE everywhere, pushed authorization requests, DPoP, issuer identification, resource indicators and token exchange.
- Mobile security
Integrating OAuth With Mobile Apps: The Native App Pattern
How native iOS and Android apps should use OAuth 2.0: system browser, PKCE, claimed HTTPS redirects, secure token storage and what to avoid (embedded webviews).
- Federation
Federation and Entitlement Management: How They Fit Together
Federation tells an app who the user is; entitlement management decides what they may do. How SAML, OIDC, SCIM and policy engines divide the work.
- Cloud computing
Calling On-Premises Web Services From the Cloud, Securely
How cloud apps can call web services that still live in your data center: gateways, mTLS, token exchange and why you should not just open a firewall port.