What you'll learn

It's never been easier to expose services over HTTP. It's also never been easier to inadvertently expose security holes via those same services. This session is designed for the average developer/architect that wants a brief overview of API security without getting into the weeds of cryptography or complex authentication frameworks. You'll learn from Seth Petry-Johnson about OAuth, API Keys, HMAC, JSON Web Tokens (JWT), and more. Don't worry if those things sound foreign; they'll be explained in a clear, practical way so that you’ll be able to choose the appropriate tool for your specific needs.