Securing PHP APIs with Decentralised Identity Tokens
summary
Demonstrates securing PHP REST APIs by issuing DID tokens from Magic (client-side Magic SDK) and validating them server-side with magic-admin-php validate(). Builds a Composer + MySQL API (GET/POST/PUT/DELETE), extracts email from the DID token and gates create/update/delete routes; default tokens last 15 minutes and can be extended. DID tokens are Base64 JSON signed with Ethereum personal_sign and backed by delegated key management using HSMs. Notes 59% password reuse and the Equifax $4.2M breach as motivation.
AI-written summary · about
chapters (5)
- 0:00Start
- 5:21What is DID Token?
- 8:08Authentication & Authorization
- 10:20Build PHP API
- 10:58composer init
related talks
33mSecure your Go APIs with Decentralised Identity Tokens
13mMagic Authentication, The Missing LEGO Piece
47mProtect your API with OAuth2
29mSecuring PHP Applications with Zero Trust Principles
45mMarket Trends and Opportunities for Blockchain Based Decentralized Identity (DID)
33mWhy you shouldn´t care about Security
46mDecentralized identity: What’s all the fuss about?
18mSecure your Apps and APIs with strong authentication and Adaptive Access.