OAuth mTLS – Added Security Challenges
This latest article in a series discusses the additional security issues that arise when using mTLS, and how to mitigate those issues by combining mTLS with OAuth.
All API & Microservices Content
Turf wars; Who owns that API?
This artcile takes a look at API ownership and the importance of implementing an API management solution
OAuth mTLS Adoption Challenges
This article discusses adoption challenges with OAuth mTLS, steps one can take to mitigate those challenges.
API Academy Workshop in Paris
At Apidays Paris, API Academy will be conducting a four hour workshop highlighting best practices in API design, strategy, security, and futures. Apidays will be December 14-16 at the Cité des sciences et de l’industrie. The API Academy Workshop will be conducted from 2:00pm to 5:45pm on December 14. As an API Academy reader, you can […]
OAuth mTLS – An Introduction to Mutual TLS for APIs
This blog introduces mTLS and discusses the advantages of combining it with OAuth 2.0 for additional security.
GraphQL Schemas – From Design-time Introspection to Runtime Content Validation
This blog takes a look at GraphQL from a security perspective, and how to design a schema that meets CSO requirements.
API Academy Workshop with Apidays NYC 2022: Emerging Strategies with API Gateways
At the API Academy Workshop held in conjunction with Apidays NYC 2022, Bala discusses emerging strategies with API gateways.
API Academy Workshop with Apidays NYC 2022: Emerging Gateway Patterns
At the API Academy Workshop done in conjunction with Apidays NYC 2022, Gary discusses emerging gateway patterns and how to prepare for them.
API Academy Workshop with Apidays NYC 2022: Improving API Resiliency Using API Gateways
In this session, Daniel discusses how to better API resiliency using API gateways.
API Academy Workshop with Apidays NYC 2022: API Security Deep Dive
In this session, Francois takes a deep dive into how to better protection your enterprise from bad actors. He’s following by Skip Hovsmith (Approov) who dives into API client attestation.