Access Control for your API Endpoints
summary
Creates an Auth0 tenant and a single‑page app from the sample, configures Auth0 SPA SDK for HTTPS, models an API as my secret API with a read:secret scope, then requests an access token with permissions and enables role-based access control. Assigns an admin role to a user, the app adds the token to the API call, and the API accepts the token and returns the secret — the demo runs end‑to‑end and shows permissions embedded in the access token.
AI-written summary · about
chapters (13)
- 0:00Start
- 5:58Agenda
- 6:55Overview
- 14:01Single Page Application
- 25:59Sample App
- 29:08Modify the Application To Call an Api
- 37:09Get an Access Token
- 41:34What Is Authorization and Access Control
- 42:11Role Based Access Control
- 42:50Row Base Access Control
- 51:07Live Documentation
- 51:45How Can We Use Serial for Microservices
- 52:05Client Credential Grant
related talks
48mAccess Control for your API Endpoints with Auth0
48mAccess Control for your API Endpoints with Auth0
01h 02mDemystifying Web API Security in Azure
53mWeb API Security With Azure Active Directory
01h 03mServerless and App Service Security on Azure
50mSecuring a REST API with Azure Active Directory
31mAuthorised is Not a Yes No Question
45mAPI Security: Acting Now to Enable Security Controls