Secure and Practical Authentication in API Platform
summary
Overview of how to secure APIs built with API Platform by using Symfony Security: covers Symfony's authenticators, community bundles, and the trade-offs between stateful vs stateless approaches, cookies vs headers, and standard protocols vs custom authentication flows. Compares these options and gives guidance on which to choose based on application and infrastructure, and introduces a new solution that helps address these authentication decisions.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 2:53Session authentication
- 13:56JWT authentication
- 21:54JWT configuration
- 35:24OAuth2 authentication
- 41:03Comparison and conclusion
related talks
21mValidate Your Data with API Platform
18mAPI Security Simplified: A 5-Pillar Approach
32mSecuring Value in API Ecosystems
20mBuilding a secure API: Overview of techniques and technologies needed to launch a secure API
17mAPI Security Simplified: Practical Tips & Tools
18mSecure your Apps and APIs with strong authentication and Adaptive Access.
38mThe Impact of API Platform on Open Source
26mDeveloping an API without API Platform