It’s Not Magic: Elevate Auth Security with PKCE Best Practices
watch on portal.gitnation.org ↗https://portal.gitnation.org/contents/its-not-magic-elevate-auth-security-with-pkce-best-practicessummary
Covers modern best practices for OAuth security with a focus on PKCE (Proof Key for Code Exchange) as a way to strengthen authorization and authentication. Explains common implementation weaknesses and anti-patterns attackers exploit, and presents concrete recommendations to keep users, apps and resources safer.
AI-written summary · about
related talks
46mA Deep Dive into the Past, Present & Future of OAuth
47mHacking OAuth
01h 02mOpenID Connect & OAuth 2.0 – Security Best Practices
44mThe Art of Authentication for Web Apps
59mOpenID Connect & OAuth 2.0 – Security Best Practices
01h 05mCommon mistakes and misconceptions in Web App Security using OAuth 2.0 and OpenId Connect
30mStandards-based authentication for JavaScript sites
56mSecuring an API Ecosystem with OAuth 2 0