4 ms·
Yes, also don't forget securing API credentials properly. As a matter of fact, I have a blog post coming about this topic soon.
by suyash 5y ago
Yes, also don't forget securing API credentials properly. As a matter of fact, I have a blog post coming about this topic soon.
- mooreds 5y agoWould love to see it. Whether tokens or API keys, I'm always interested in how folks recommend securing them. There's also some interesting stuff around token binding happening. DPoP is moving towards becoming a standard: https://datatracker.ietf.org/doc/html/draft-ietf-oauth-dpop-07 https://datatracker.ietf.org/doc/html/draft-ietf-oauth-dpop-...