Input Validation: Because Users Are Creative, and Attackers Are More Creative
There is a special kind of optimism that exists in software development.
Read article: Input Validation: Because Users Are Creative, and Attackers Are More CreativeAPI Management
25 articles tagged API Management.
A Vendor DMZ Pattern
A long time ago, I was doing integration architecture work in the land of Enterprise Service Buses (ESBs) and API Gateways. Think IBM WebSphere DataPower and Apigee — I like to remember Apigee the way it was before it was integrated into GCP. After we had designed and built the ESB, we moved on to…
Read article: A Vendor DMZ Pattern
API Design: Planned, Unplanned, Security and Utter Chaos
I’ve discussed APIs and API Management in previous blog posts. These are among my older blog posts, but the points being made are, generally, still relevant. I’ve never published a blog post exclusively about API design. I have a blog post about “API Gateways and Multiple Consumer Types” where I…
Read article: API Design: Planned, Unplanned, Security and Utter Chaos
API GOVERNANCE: A VITAL BUILDING BLOCK FOR API SECURITY
This post was originally published as “API GOVERNANCE: A VITAL BUILDING BLOCK FOR API SECURITY” on the Ping Identity blog.
Read article: API GOVERNANCE: A VITAL BUILDING BLOCK FOR API SECURITY
Identity + API Management Component Relationships
This diagram captures the relationships between concepts I’ve been writing about for a couple of years now.
Read article: Identity + API Management Component Relationships
A Brief Summary of All Things Apigee and API Management that I Have Written
Not so long ago, someone asked me for a list of all the Apigee and API Management related material I have written. The following was my response. The recipient suggested that I post this; so, here we go.
Read article: A Brief Summary of All Things Apigee and API Management that I Have Written
Demo: Apigee Edge OAuth2 Debugging
This post was originally published as “Demo: Apigee Edge OAuth2 Debugging” on the Apigee Blog.
Read article: Demo: Apigee Edge OAuth2 Debugging
Apigee Edge and Third-Party Identity Provider Integration — Detailed View
This post provides a detailed view of what happens when my example API Proxy that integrates Apigee Edge and a Third-Party Identity Provider for OAuth2 use cases. The setup instructions are available here.
Read article: Apigee Edge and Third-Party Identity Provider Integration — Detailed View
Apigee Edge OAuth2 and Third-Party Identity Providers
This blog post summarizes the details of how to deploy and configure the the Apigee Edge OAuth2 example that I put together. This example will use the OAuth2 Authorization Code Grant and Refresh Token Grant to demonstrate how OAuth2 can be used with Apigee Edge in a real-world application.
Read article: Apigee Edge OAuth2 and Third-Party Identity Providers
Differences Between Azure Active Directory and Red Hat SSO v7.1
I recently finished implementing OAuth2 and OIDC support for Azure Active Directory in my OAuth2 + OIDC Debugger. Previously, we implemented support for Red Hat SSO v7.1 and 3Scale. This post compares the two product’s implementations of these protocols (OAuth2 and OIDC). In particular, it looks at…
Read article: Differences Between Azure Active Directory and Red Hat SSO v7.1