Towards a standard for bearer token URLs – Neil Madden

In XSS doesn't have to be Game Over, and earlier when discussing Can you ever (safely) include credentials in a URL?, I raised the possibility of standardising a new URL scheme that safely allows encoding a bearer token into a URL. This makes it more convenient to use lots of very fine-grained tokens rather than one…

API security – Neil Madden

WebAuthn and Security Keys

RESTFul Aras APIs Testing With Postman, PDF, Representational State Transfer

When and Why Would I use Oauth2?

Deep Dive into Keystone Tokens and Lessons Learned

Authentication Using Twitter, Google, Facebook, And More

Security – Neil Madden

Mandala #13 - Mandala Madness - Art, Abstract, Soul, Color, Life, Body, Peace, Generative, Love, Dream, Buddha

APIdays INTERFACE 2021] The Evolution of API Security for Client-side Applications

PDF] Synthetic Initialization Vector (SIV) Authenticated Encryption Using the Advanced Encryption Standard (AES)