Collaborate Disseminate
I’m studying for the CCSP exam and am confused on the difference between an “API gateway” and “XML gateway”. The training material I have states:
API gateways are also an important part of a layered security model.
T… Continue reading What’s the difference between an API gateway and XML gateway?
More and more IT professionals see DevSecOps, a practice which integrates security measures earlier in the development process to improve production code quality, as a mainstay for future application development. Much of this stems from the growing tre… Continue reading Security Strategies for DevOps, APIs, Containers and Microservices
We are currently implementing a Single Page Application (Angular2) and thus have run into the standard “how do we secure our backend API” problem.
The standard solution to this apparently to use the OAuth2 Implicit Grant Flo… Continue reading OAuth2 Implicit Flow: Possible Attack Vectors of Refreshing Token via CORS?