舉報

會員
OAuth 2.0 Cookbook
最新章節:
How it works...
ThisbooktargetssoftwareengineersandsecurityexpertswhoarelookingtodeveloptheirskillsinAPIsecurityandOAuth2.0.Priorprogrammingknowledgeandabasicunderstandingofdevelopingwebapplicationsarenecessary.Asthisbook'srecipesmostlyuseSpringSecurityandSpringSecurityOAuth2,somepriorexperiencewithSpringFrameworkwillbehelpful.
目錄(316章)
倒序
- coverpage
- Title Page
- Copyright
- OAuth 2.0 Cookbook
- Credits
- About the Author
- About the Reviewer
- www.PacktPub.com
- Why subscribe?
- Customer Feedback
- Preface
- What this book covers
- What you need for this book
- Who this book is for
- Sections
- Getting ready
- How to do it…
- How it works…
- There's more…
- See also
- Conventions
- Reader feedback
- Customer support
- Downloading the example code
- Downloading the color images of this book
- Errata
- Piracy
- Questions
- OAuth 2.0 Foundations
- Introduction
- Preparing the environment
- Getting ready
- How to do it...
- See also
- How it works...
- There's more...
- See also
- Reading the user's contacts from Facebook on the client side
- Getting ready
- How to do it...
- How it works...
- There's more...
- See also
- Reading the user's contacts from Facebook on the server side
- Getting ready
- How to do it...
- How it works...
- There's more...
- See also
- Accessing OAuth 2.0 LinkedIn protected resources
- Getting ready
- How to do it...
- How it works...
- There's more...
- See also
- Accessing OAuth 2.0 Google protected resources bound to the user's session
- Getting ready
- How to do it...
- How it works...
- There's more...
- See also
- Implementing Your Own OAuth 2.0 Provider
- Introduction
- Protecting resources using the Authorization Code grant type
- Getting ready
- How to do it...
- How it works...
- There's more...
- Supporting the Implicit grant type
- Getting ready
- How to do it...
- How it works...
- There's more...
- See also
- Using the Resource Owner Password Credentials grant type as an approach for OAuth 2.0 migration
- Getting ready
- How to do it...
- How it works...
- There's more...
- See also
- Configuring the Client Credentials grant type
- Getting ready
- How to do it...
- How it works...
- There's more...
- See also
- Adding support for refresh tokens
- Getting ready
- How to do it...
- How it works...
- There's more...
- See also
- Using a relational database to store tokens and client details
- Getting ready
- How to do it...
- How it works...
- There's more...
- See also
- Using Redis as a token store
- Getting ready
- How to do it...
- How it works...
- See also
- Implementing client registration
- Getting ready
- How to do it...
- How it works...
- See also
- Breaking the OAuth 2.0 Provider in the middle
- Getting ready
- How to do it...
- How it works...
- See also
- Using Gatling to load test the token validation process using shared databases
- Getting ready
- How to do it...
- How it works...
- See also
- Using OAuth 2.0 Protected APIs
- Introduction
- Creating an OAuth 2.0 client using the Authorization Code grant type
- Getting ready
- How to do it...
- How it works...
- Creating an OAuth 2.0 client using the Implicit grant type
- Getting ready
- How to do it...
- How it works...
- There's more...
- See also
- Creating an OAuth 2.0 client using the Resource Owner Password Credentials grant type
- Getting ready
- How to do it...
- How it works...
- There's more...
- See also
- Creating an OAuth 2.0 client using the Client Credentials grant type
- Getting ready
- How to do it...
- How it works...
- See also
- Managing refresh tokens on the client side
- Getting ready
- How to do it...
- How it works...
- See also
- Accessing an OAuth 2.0 protected API with RestTemplate
- Getting ready
- How to do it...
- How it works...
- See also
- OAuth 2.0 Profiles
- Introduction
- Revoking issued tokens
- Getting ready
- How to do it...
- How it works...
- Remote validation using token introspection
- Getting ready
- How to do it...
- How it works...
- There's more...
- Improving performance using cache for remote validation
- Getting ready
- How to do it...
- How it works...
- See also
- Using Gatling to load test remote token validation
- Getting ready
- How to do it...
- There's more...
- See also
- Dynamic client registration
- Getting ready
- How to do it...
- How it works...
- There's more...
- See also
- Self Contained Tokens with JWT
- Introduction
- Generating access tokens as JWT
- Getting ready
- How to do it...
- How it works...
- See also
- Validating JWT tokens at the Resource Server side
- Getting ready
- How to do it...
- How it works...
- There's more...
- See also
- Adding custom claims on JWT
- Getting ready
- How to do it...
- How it works...
- See also
- Asymmetric signing of a JWT token
- Getting ready
- How to do it...
- How it works...
- See also
- Validating asymmetric signed JWT token
- Getting ready
- How to do it...
- How it works...
- See also
- Using JWE to cryptographically protect JWT tokens
- Getting ready
- How to do it...
- How it works...
- See also
- Using JWE at the Resource Server side
- Getting ready
- How to do it...
- How it works...
- See also
- Using proof-of-possession key semantics on OAuth 2.0 Provider
- Getting ready
- How to do it...
- How it works...
- There's more...
- See also
- Using proof-of-possession key on the client side
- Getting ready
- How to do it...
- How it works...
- See also
- OpenID Connect for Authentication
- Introduction
- Authenticating Google's users through Google OpenID Connect
- Getting ready
- How to do it...
- How it works...
- See also
- Obtaining user information from Identity Provider
- Getting ready
- How to do it...
- How it works...
- There's more...
- See also
- Using Facebook to authenticate users
- Getting ready
- How to do it...
- How it works...
- See also
- Using Google OpenID Connect with Spring Security 5
- Getting ready
- How to do it...
- How it works...
- See also
- Using Microsoft and Google OpenID providers together with Spring Security 5
- Getting ready
- How to do it...
- How it works...
- See also
- Implementing Mobile Clients
- Introduction
- Preparing an Android development environment
- Getting ready
- How to do it...
- How it works...
- Creating an Android OAuth 2.0 client using an Authorization Code with the system browser
- Getting ready
- How to do it...
- How it works...
- There's more...
- See also
- Creating an Android OAuth 2.0 client using the Implicit grant type with the system browser
- Getting ready
- How to do it...
- How it works...
- See also
- Creating an Android OAuth 2.0 client using the embedded browser
- Getting ready
- How to do it...
- How it works...
- See also
- Using the Password grant type for client apps provided by the OAuth 2 server
- Getting ready
- How to do it...
- How it works...
- There's more...
- See also
- Protecting an Android client with PKCE
- Getting ready
- How to do it...
- How it works...
- See also
- Using dynamic client registration with mobile applications
- Getting ready
- How to do it...
- How it works...
- See also
- Avoiding Common Vulnerabilities
- Introduction
- Validating the Resource Server audience
- Getting ready
- How to do it...
- How it works...
- Protecting Resource Server with scope validation
- Getting ready
- How to do it...
- How it works...
- Binding scopes with user roles to protect user's resources
- Getting ready
- How to do it...
- How it works...
- See also
- Protecting the client against Authorization Code injection
- Getting ready
- How to do it...
- How it works...
- Protecting the Authorization Server from invalid redirection
- Getting ready
- How to do it...
- How it works... 更新時間:2021-07-08 09:35:50
推薦閱讀
- GitLab Cookbook
- CockroachDB權威指南
- 程序設計與實踐(VB.NET)
- HTML5+CSS3+JavaScript Web開發案例教程(在線實訓版)
- Data Analysis with Stata
- JavaScript 程序設計案例教程
- Learning R for Geospatial Analysis
- Azure Serverless Computing Cookbook
- Raspberry Pi Robotic Projects(Third Edition)
- Oracle Data Guard 11gR2 Administration Beginner's Guide
- INSTANT Apache Hive Essentials How-to
- Python機器學習開發實戰
- Learning Alfresco Web Scripts
- 可視化H5頁面設計與制作:Mugeda標準教程
- Python程序設計:基礎與實踐
- 菜鳥成長之路
- Node.js進階之路
- The Python Apprentice
- Real-time Web Application Development using Vert.x 2.0
- Web應用程序設計:ASP
- Mastering Chef Provisioning
- 活動中臺:揭秘vivo的千萬級DAU活動中臺
- Unity 2017 Game Optimization(Second Edition)
- Spring Batch Essentials
- ROS機器人程序設計
- 客戶驅動的產品開發
- Java開發寶典
- Java Web程序設計教程
- Java EE輕量級框架應用開發教程
- Flutter組件詳解與實戰