API Authentication

Home API Penetration Testing Course Malware Analysis API Authentication SSDLC IS Auditing, Controls and Assurance Cyber Incident Response Security of the Pipeline Security in the Pipeline Container Security Infrastructure as Code

Introduction
API Authentication - a (very) brief introduction
OAuth Actors
OAuth 2.0 Interaction patterns
Tokens
Scopes and Claims
APIs and Gateways
Final Assessment

Powered by GitBook

On this page

How is it encoded
Reference
Purpose - who is it for
Type - how can it be used

Formats

PreviousTokens NextBearer

Last updated 3 months ago

How is it encoded

By value
By reference

Reference

Opaque to the holder

Can not be decrypted or decoded

Requires call to the Authorization server to read and validate

Safer to use on the Internet

Purpose - who is it for

Type - how can it be used

Bearer
Holder of Key (HoK) / Proof of Possession (PoP)