Securing Your API Endpoints: CodeMash

API Security Essentials for Developers & Architects

Are you exposing services over HTTP? It's simpler than ever, but that ease can also create vulnerabilities. This session provides a concise overview of API security tailored for developers and architects who need to understand the basics without diving into complex cryptography or authentication frameworks.

Led by Seth Petry-Johnson, you'll gain practical knowledge of key API security mechanisms, including:

• OAuth: Understand how to delegate access to resources securely.
• API Keys: Learn about a common method for identifying and authorizing API users.
• HMAC (Hash-based Message Authentication Code): Explore a technique for verifying data integrity.
• JSON Web Tokens (JWT): Discover a standard for securely transmitting information as a JSON object.

Don't be intimidated if these terms are new to you. We'll explain each concept in a clear, practical way, empowering you to select the right API security tool for your specific application and protect your services. This session helps you navigate the landscape of HTTP API security and avoid common pitfalls.