Practical Auth in a Serverless World

on YouTube ↗01h 06m

" summary

Shows concrete recipes for authenticating Azure Functions with Auth0 using OAuth 2 and JWT, plus Azure Key Vault and Azure Managed Identities for secret distribution and Cloudflare Workers for edge validation. Demonstrates a token renewer that caches tokens in memory and Key Vault to avoid paying per-token costs, cites default 24h lifetimes and cases of over a thousand token requests per day, explains validating JWT at the edge vs inside functions and using function/API keys to prevent wasted bindings and downstream IO.

AI-written summary · about

" chapters (4)

1. 0:00Start
2. 24:31Azure Function Bindings declare actions without writing code
3. 26:03Azure Function Bindings bindings run before the function code
4. 35:43How To Store & Access Secrets?

" related talks

• 47mSecuring Serverless Applications in AzureSjoukje Zaal · Build Stuff 2020
• 50mSecuring Serverless Applications in AzureSjoukje Zaal · NDC Sydney 2020
• 58mLet's talk AuthJordan Knight · NDC Sydney 2016
• 27mAuthentication for the REST of usDivya Sasidharan · NationJS Frontrunners 2019
• 01h 00mSecuring Serverless Applications in AzureSjoukje Zaal · NDC London 2020
• 01h 02mModern AuthenticationRob Moore · NDC Sydney 2016
• 01h 03mServerless and App Service Security on AzureMahesh Krishnan, Pratik Khasnabis · NDC Sydney 2019
• 41mEasy-Auth: The Easiest Way to Secure Your Application in Azure App ServiceMassimo Bonanni · DevDays Europe 2024