Openid Connect in Action

Auteur

Prabath Siriwardena has over a decade of experience working in access management and security. He has built security solutions for numerous Fortune 500 companies, and spoken at some of the world’s top security conferences.

Texte du rabat

An example-driven guide to securing access to your applications with OpenID Connect, the OAuth-based identity layer that keeps billions of user interactions safe every day. In OpenID Connect in Action you will:

Build client applications that integrate OpenID Connect adhering to best practices Create single-page applications secured with OpenID Connect Integrate OpenID connect with native mobile and server-side web applications Federate access to APIs/microservices from a client application Use OpenID Connect to secure access to smart TV applications Explore common login security pitfalls and how to avoid them Take a deep-dive into the internals of OpenID Connect

Login security is a complex problem with a simple solution: OpenID Connect. OpenID Connect in Action takes you under the hood of this reliable identity layer, showing you how to integrate OpenID Connect into a server-side web application, a single-page application (SPA), a native mobile application, APIs, and more.

Contenu

table of contentsREAD IN LIVEBOOK1THE OPENID CONNECT LANDSCAPEREAD IN LIVEBOOK2THE CORNERSTONE OF OPENID CONNECTREAD IN LIVEBOOK3SECURING ACCESS TO A SINGLE-PAGE APPLICATIONREAD IN LIVEBOOK4THE BUILDING BLOCKS OF AN ID TOKENREAD IN LIVEBOOK5REQUESTING AND RETURNING CLAIMSREAD IN LIVEBOOK6SECURING ACCESS TO A SERVER-SIDE WEB APPLICATION7 LOGGING OUTREAD IN LIVEBOOK8CLAIM-BASED ACCESS CONTROL WITH OPEN POLICY AGENT (OPA)9 SECURING ACCESS TO A NATIVE MOBILE APPLICATION10 MITIGATING COMMON THREATS AND VULNERABILITIESAPPENDIXESREAD IN LIVEBOOKAPPENDIX A: REACT FUNDAMENTALSREAD IN LIVEBOOKAPPENDIX B: REACT NATIVE FUNDAMENTALS