An Alternative to Delegated Access in the Enterprise
Extending OAuth2 and OpenID Connect as the enterprise standard for API security
Read article: An Alternative to Delegated Access in the EnterpriseSecurity
111 articles tagged Security.
Keeping Your APIs Secure for Multiple User Types
This post was originally published as “Keeping Your APIs Secure for Multiple User Types” on the Apigee Blog.
Read article: Keeping Your APIs Secure for Multiple User Types
API MANAGEMENT AND PERIMETER SECURITY FOR COTS APPLICATIONS
This post was originally published as “API Management and Perimeter Security for COTS Applications” on the Levvel Blog.
Read article: API MANAGEMENT AND PERIMETER SECURITY FOR COTS APPLICATIONS
API Security vs. Web Application Security: Part 2
This post was originally published as “API Security vs. Web Application Security: Part 2” on the Levvel Blog.
Read article: API Security vs. Web Application Security: Part 2
API Security vs. Web Application Security Part 1: A Brief History of Web Application Architecture
This post was originally published as “API Security vs. Web Application Security Part 1: A Brief History of Web Application Architecture” on the Levvel Blog.
Read article: API Security vs. Web Application Security Part 1: A Brief History of Web Application Architecture
DSig Part 1: XML Digital Signature and WS-Security Integrity
This post was originally published as “DSig Part 1: XML Digital Signature and WS-Security Integrity” on the Levvel Blog.
Read article: DSig Part 1: XML Digital Signature and WS-Security Integrity
Nissan LEAF, API Security, Who Owns API Security, and How Much Security Is Enough?
This post was originally published as “Nissan LEAF, API Security, Who Owns API Security, and How Much Security Is Enough?” on the Levvel Blog.
Read article: Nissan LEAF, API Security, Who Owns API Security, and How Much Security Is Enough?
Convert an X509v3 Binary Security Token to PEM Format
This tutorial describes how to convert a Binary Security Token extracted from a SOAP message into a valid PEM format that can be read by openssl or similar tool. If you are ever troubleshooting the use of X509v3 certificates used with WS-Security, this can come in very handy.
Read article: Convert an X509v3 Binary Security Token to PEM Format
WS-Security Integrity (XML Digital Signature)
This post continues exploring the use of XML Digital Signature; this time we look at WS-Security Integrity (use of XML Digital Signatures with WS-Security). Our examples show a digital signature and a timestamp in a WS-Security <Security> SOAP Header.
Read article: WS-Security Integrity (XML Digital Signature)
XML Digital Signature (an Example)
In the last post, we looked at the steps involved in generating a digital signature using the XML Digital Signature spec. The algorithm to produce a signature and validate it were explored but no examples were given. In this post, we’ll look at an example that is given in the XML Digital Signature…
Read article: XML Digital Signature (an Example)