Protecting your APIs

More and more applications are built using JSON HTTP APIs for data and functionality. This workshop will walk you why you'd want to protect APIs and enumerate the options you have to protect them.

After a brief introduction to JSON HTTP APIs, you'll build a PHP based API project which allows users to retrieve Chuck Norris quotes. You'll then progressively protect the API using a variety of methods. You'll also understand why and when to use each choice, as well as the tradeoffs they provide.

At the end of this workshop, you'll have built:

* an unprotected API
* an API protected with an API key
* an API protected using a JWT generated elsewhere

Comments

Please login to leave a comment

Abinadi Ayerdis at 12:03 on 2 Nov 2023 (via Web2 LIVE)

Great job, I wish the quizzes were closer to the coding without a Please Wait" screen in between.

Dan Moore (Speaker) at 21:45 on 2 Nov 2023 (via Web2 LIVE)

Here's the slides: https://www.slideshare.net/DanMoore12/protecting-your-apispdf

The slides have a link to the GitHub repo that contains the PHP code.

Dan Moore (Speaker) at 21:57 on 2 Nov 2023 (via Web2 LIVE)

I don't know how to make that link clickable.

Dan Moore (Speaker) at 21:58 on 2 Nov 2023 (via Web2 LIVE)

Thanks Abinadi for the feedback!

Joseph Thayne at 09:15 on 3 Nov 2023 (via Web2 LIVE)

Really enjoyed the hands on coding exercises. They were helpful. I felt some explanations might have been missing, but I don't have examples on specifically what.

Elyzza Bobadilla at 09:27 on 3 Nov 2023 (via Web2 LIVE)

Really enjoyed the structure of the tutorial and the built-in breaks with optional, prompted discussions. Hoping the Windows issue gets fixed for future tutorials.