Auteur
Prabath Siriwardena has over a decade of experience working in access management and security. He has built security solutions for numerous Fortune 500 companies, and spoken at some of the world's top security conferences.

Texte du rabat

An example-driven guide to securing access to your applications with OpenID Connect, the OAuth-based identity layer that keeps billions of user interactions safe every day. In OpenID Connect in Action you will:

Build client applications that integrate OpenID Connect adhering to best practices Create single-page applications secured with OpenID Connect Integrate OpenID connect with native mobile and server-side web applications Federate access to APIs/microservices from a client application Use OpenID Connect to secure access to smart TV applications Explore common login security pitfalls and how to avoid them Take a deep-dive into the internals of OpenID Connect

Login security is a complex problem with a simple solution: OpenID Connect. OpenID Connect in Action takes you under the hood of this reliable identity layer, showing you how to integrate OpenID Connect into a server-side web application, a single-page application (SPA), a native mobile application, APIs, and more.

Résumé
An example-driven guide to securing access to your applications with OpenID Connect, the OAuth-based identity layer that keeps billions of user interactions safe every day.

In OpenID Connect in Action* you will:

• Build client applications that integrate OpenID Connect adhering to best practices
• Create single-page applications secured with OpenID Connect
• Integrate OpenID connect with native mobile and server-side web applications
• Federate access to APIs/microservices from a client application
• Use OpenID Connect to secure access to smart TV applications
• Explore common login security pitfalls and how to avoid them
• Take a deep-dive into the internals of OpenID Connect
  Login security is a complex problem with a simple solution: OpenID Connect. OpenID Connect in Action* takes you under the hood of this reliable identity layer, showing you how to integrate OpenID Connect into a server-side web application, a single-page application (SPA), a native mobile application, APIs, and more.

about the technology

OpenID Connect is an easy-to-implement identity layer built on top of OAuth 2. OpenID Connect helps secure billions of user interactions on the internet daily. Because it uses the JSON standard, OpenID Connect is more lightweight than legacy alternatives and flexible enough to meet the ID federation requirements for all types of modern applications.

about the book

OpenID Connect in Action* teaches you to deploy OpenID Connect to secure access to your apps. Ten-year access management veteran Prabath Siriwardena takes you in-depth with the widely adopted technology, showing you how to optimize OpenID Connect for your application's specific use cases. You'll work to secure end-to-end example applications created with React and React Native, and even develop solutions for Smart TVs and APIs.

Contenu

table of contents

READ IN LIVEBOOK

1THE OPENID CONNECT LANDSCAPE

READ IN LIVEBOOK

2THE CORNERSTONE OF OPENID CONNECT

READ IN LIVEBOOK

3SECURING ACCESS TO A SINGLE-PAGE APPLICATION

READ IN LIVEBOOK

4THE BUILDING BLOCKS OF AN ID TOKEN

READ IN LIVEBOOK

5REQUESTING AND RETURNING CLAIMS

READ IN LIVEBOOK

6SECURING ACCESS TO A SERVER-SIDE WEB APPLICATION

7 LOGGING OUT

READ IN LIVEBOOK

8CLAIM-BASED ACCESS CONTROL WITH OPEN POLICY AGENT (OPA)

9 SECURING ACCESS TO A NATIVE MOBILE APPLICATION

10 MITIGATING COMMON THREATS AND VULNERABILITIES

APPENDIXES

READ IN LIVEBOOK

APPENDIX A: REACT FUNDAMENTALS

READ IN LIVEBOOK

APPENDIX B: REACT NATIVE FUNDAMENTALS

#