API Security Weekly: Issue #144

3 years ago dzone.com

Summary: This is a summary of an article originally published by the source. Read the full original article here →

This week, JustDial has had to re-fix an old API vulnerability that they already fixed in 2019.

JustDial had a regression as they accidentally reintroduced the API vulnerability that they had fixed (and we reported) back in 2019.

OAuth 2.0 — along with OpenID Connect that is based on OAuth — is the foundation of modern API authentication and delegated access.

In his session, Parecki covers the origins and goals of the OAuth 0, OAuth 0, and OAuth standards (RFCs) that define OAuth, adjacent technologies, tokens and their security, upcoming standards and extensions, and the upcoming Grant Negotiation and Authorization Protocol (GNAP).

DevOps Articles