https://developer.okta.com/blog/2019/01/22/oauth-api-keys-arent-safe-in-mobile-apps
Let's take a look at two ways it's possible to hack secret API keys out of mobile apps.
api keysoauthsecretssafe
https://developer.okta.com/blog/2019/12/13/oauth-2-1-how-many-rfcs
The OAuth 2.0 specificiation is a maze of documentation that developers need to understand when getting started on the topic. OAuth 2.1 can help fix this!
oauthmanyrfcstake
https://developer.okta.com/blog/2022/04/14/where-okta-meets-devops
Okta's most familiar use case is SSO to applications like mail, chat, and other cloud services. But it can also help automate administration tasks with...
okta developerdevopsengineersuse
https://developer.okta.com/blog/2019/05/01/is-the-oauth-implicit-flow-dead
In this post, we'll look at what's changing in the Implicit Flow and why.
okta developeroauthimplicitflowdead
https://developer.okta.com/
Secure, scalable, and highly available authentication and user management for any app.
okta developer
https://developer.okta.com/blog/2019/06/04/what-the-heck-is-sign-in-with-apple
Sign In with Apple is based on OAuth 2.0 and OpenID Connect, and provides a privacy-friendly way for users to sign in to websites and apps
okta developerhecksignapple
https://developer.okta.com/blog/2023/01/12/signin-custom-domain
Redirecting to the Okta-hosted sign-in page is the most secure way to authenticate users in your application. But the default configuration yield a very...
okta developersecurethemedsign
https://developer.okta.com/blog/2023/04/04/spa-auth-tokens
Authentication and authorization in public clients like single-page applications can be complicated! In this post, we'll walk through the Authorization Code...
okta developerauthenticationauthorizationworkspas
https://developer.okta.com/blog/2019/07/10/java-microprofile-jwt-auth
This tutorial shows you how to build a REST API with MicroProfile and secure it using JWT authentication.
rest apibuildusingjavamicroprofile
https://developer.okta.com/blog/2019/02/19/add-oauth-device-flow-to-any-server
Learn how to run an OAuth 2.0 Device Flow proxy server so you can use the Device Flow with servers that don't have native support.
addoauthdeviceflow