OpenID Connect in Action (MEAP V13)

Description

An example-driven guide to securing access to your applications with OpenID Connect, the OAuth-based identity layer that keeps billions of user interactions safe every day. In OpenID Connect in Action you will Build client applications that integrate OpenID Connect adhering to best practices Create single-page applications secured with OpenID Connect Integrate OpenID connect with native mobile and server-side web applications Federate access to APIs/microservices from a client application Use OpenID Connect to secure access to smart TV applications Explore common login security pitfalls and how to avoid them Take a deep-dive into the internals of OpenID Connect Login security is a complex problem with a simple solution: OpenID Connect. OpenID Connect in Action takes you under the hood of this reliable identity layer, showing you how to integrate OpenID Connect into a server-side web application, a single-page application (SPA), a native mobile application, APIs, and more. about the technology OpenID Connect is an easy-to-implement identity layer built on top of OAuth 2. OpenID Connect helps secure billions of user interactions on the internet daily. Because it uses the JSON standard, OpenID Connect is more lightweight than legacy alternatives and flexible enough to meet the ID federation requirements for all types of modern applications. about the book OpenID Connect in Action teaches you to deploy OpenID Connect to secure access to your apps. Ten-year access management veteran Prabath Siriwardena takes you in-depth with the widely adopted technology, showing you how to optimize OpenID Connect for your application’s specific use cases. You’ll work to secure end-to-end example applications created with React and React Native, and even develop solutions for Smart TVs and APIs. Copyright_2023_Manning_Publications welcome 1_The_OpenID_Connect_landscape 2_The_cornerstone_of_OpenID_Connect 3_Securing_access_to_a_single-page_application 4_The_building_blocks_of_an_ID_token 5_Requesting_and_returning_claims 6_Securing_access_to_a_server-side_web_application 7_Logging_out 8_Claim-based_access_control_with_Open_Policy_Agent_(OPA) 9_Securing_access_to_a_native_mobile_application_with_OpenID_Connect 10_Mitigating_common_threats_and_vulnerabilities Appendix_A._React_fundamentals