October 2020
Intermediate to advanced
358 pages
8h 39m
English
In this chapter, we covered the basics of web API security, including identity, access control, and encryption. We also learned about the OpenAuth protocol and about JSON Web Tokens. Finally, we covered the steps needed to use the Auth0 third-party OAuth provider to generate and validate JWT access tokens for your web API and how to modify your API code to support secured requests over HTTP.
In the next chapter, we’ll pull all this together and deploy our working API to the cloud using the Heroku hosting service.
Read now
Unlock full access