Workshop in English - US at ZendCon & OpenEnterprise 2018
View Slides: https://www.slideshare.net/AdamEnglander/zendcon-2018-practical-api-security
Checkout the code: https://github.com/aenglander/practical-api-security-php-example-lumen
Short URL: https://joind.in/talk/1e15d
(QR-Code (opens in new window))
With the dominance of Mobile Apps, Single Page Apps for the Web, and Micro-Services, we are all building more APIs than ever before. Like many other developers, I had struggled with finding the right mix of security and simplicity for securing APIs. Some standards from the IETF have made it possible to accomplish both. Let me show you how to utilize existing libraries to lock down you API without writing a ton of code.
In this tutorial, you will learn how to write a secure API with future proof security utilizing JOSE. JOSE is a collection of complimentary standards: JWT, JWE, JWS, JWA, and JWK. JOSE is used by OAuth, OpenID, and others to secure communications between APIs and consumers. Now you can use it to secure your API.
Comments
Comments are closed.
Great in-depth explanation of some layered security techniques w/ good explanations of the how/why, and opportunity for hands on coding.
I'm interested in a copy of the slides from the opening... particularly the ones detailing the layers.