Posts

Showing posts with the label STS

tl;dr: OAuth 2.0

Externalising the Security Token Service and Identity Provider

Bearer tokens are susceptible to theft and what you can do about it