Ahead in 2020: Preparing for new mechanisms that will help secure APIs

Let me back up a bit. Today, the most common mechanism for securing APIs is OAuth2 with Bearer tokens in the form of JWTs. When calling APIs from interactive sessions in a user’s browser, the path of least resistance is to log the user in, stuff their JWT in the browser’s localStorage, and go about your business calling APIs with that JWT. There’s just one problem:

Read full article on JAXenter

 

Date:

Categorie(s):

Tag(s):

, ,