The recently published “OWASP API security top 10” report analyzes the anti-patterns that lead to vulnerabilities and security risks in APIs. In this 10 part series, we introduce these API anti-patterns. Every API professional should know about these anti-patterns. API
The 10 most critical API security risks – Part 8: Injection
The recently published “OWASP API security top 10” report analyzes the anti-patterns that lead to vulnerabilities and security risks in APIs. In this 10 part series, we introduce these API anti-patterns. Every API professional should know about these anti-patterns. API
The API Mandate – Install API Thinking at your Company
Jeff Bezos, Amazon founder and CEO, wrote the following memo to his employees around 2002. It got known as the “Bezos API Mandate” or “Amazon’s API Mandate”.
Three Common Misunderstandings about OpenID Connect
The top three things, that people do not understand about OpenID Connect. Misunderstanding 1: “We already got OAuth, so we don’t need OpenID Connect” Great, that you have OAuth. If you have it long enough, you probably have a big
OAuth 2 vs. OpenID Connect
For API security there are two standards — and both of their names start with the capital letter O. So it is no wonder, people ask all the time: What is the difference between OAuth 2 and OpenID Connect? The
New OpenID Connect Book Available Today!
How should we build signup and login for apps to increase app conversion? It needs to be simple. End-users tend to shy away from tedious onboarding processes or only get halfway through before they give up. How do some of
Digital Ecosystems – Talk at API Days Paris 2018
Digital Ecosystems – Fueled by APIsDon’t just publish APIs. Focus on creating an ecosystem with your APIs. API Days Paris 2018 https://www.apidays.co/parisDecember 11 & 12, 2018 | Paris Slides
Spotify API – How to get an OAuth Access Token (API Review Series)
In this week’s episode, I review the Spotify API – more specifically the OAuth capability. My goal: get an OAuth Access Token for my app, so I can call the API. To achieve this goal, I will go to the
Spotify API – How to get a Playlist (API-Review Series)
In this week’s episode, I review the Spotify API. My goal: get a list of all the songs in a given Spotify playlist. To achieve this goal, I will go to the dev portal, learn about the API, use the
How to use the Image Search API of unsplash.com (API-Review Series)
In this week’s episode, I review the Image Search API of unsplash.com. In this episode, you can discover, what Image Search APIs can do for you, and how to call an Image Search API from a node.js application. Don’t miss