Posts

All the articles I've posted.

• Is Authorization Code Grant Type Secure Enough?

  17 Apr, 2024

  • 10 min read

  Is Authorization Code Grant Type Secure Enough?

• OAuth2 Token Exchange in Practice

  26 Sep, 2023

  • 14 min read

  OAuth2 Token Exchange in Practice

• How to register and manage OAuth2 clients?

  20 Apr, 2021

  • 13 min read

  How to register and manage OAuth2 clients?

• How do you discover the OAuth2 server configuration?

  25 Apr, 2020

  • 8 min read

  How do you discover the OAuth2 server configuration?

• Understanding OAuth2 Landscape

  19 Apr, 2020

  • 24 min read

  Understanding OAuth2 Landscape

• API Security: How to avoid Broken Object Level Authorization & Broken Function Level Authorization

  2 Oct, 2019

  • 8 min read

  API Security: How to avoid Broken Object Level Authorization & Broken Function Level Authorization

• Web Browser SSO Profile

  10 Jun, 2018

  • 16 min read

  Web Browser SSO Profile

• Reloading SAML: IdP Discovery

  13 May, 2018

  • 16 min read

  IdP Discovery

• Reloading SAML: Why do you need SAML Metadata?

  1 Apr, 2018

  • 10 min read

  Why do you need SAML Metadata?

• Reloading SAML: SAML Basics

  27 Mar, 2018

  • 12 min read

  SAML Basics