Access Control for your API Endpoints with Auth0

on YouTube ↗48m

" summary

Creates an Auth0 tenant and a JavaScript single‑page app, runs it over HTTPS, and uses the Auth0 SPA SDK to get an ID token and then an access token for an API. Registers an API in Auth0, defines a read:secret scope, enables role-based access control, creates an admin role, assigns the scope, and reauthenticates so the access token carries the permission; the protected endpoint then returns 200 with the secret.

AI-written summary · about

" chapters (14)

1. 0:00Start
2. 7:35Agenda
3. 12:34Management Dashboard
4. 13:19Tenant Configuration
5. 13:53Github Repository
6. 15:09Create a Model
7. 16:36Live Documentation
8. 17:07Download a Sample Application
9. 21:50Install Our Ssl Certificate
10. 29:03Modify the Application To Call an Api
11. 36:07Create Api
12. 38:04Request an Access Token
13. 40:45Role Based Access Control
14. 41:31Enable Robust Access Control in Off0

" related talks

• 48mAccess Control for your API Endpoints with Auth0John Lim · apidays LIVE Jakarta 2020
• 53mAccess Control for your API EndpointsJohn Lim · Apidays LIVE Jakarta 2021
• 53mWeb API Security With Azure Active DirectoryRainer Stropek, Simon Opelt · Global Azure Austria 2021
• 01h 02mDemystifying Web API Security in AzureJimmy Bogard · NDC Sydney 2024
• 50mSecuring a REST API with Azure Active DirectoryRick v.d. Bosch · Future Tech 2019
• 59mSecuring Web APIs from JavaScript/SPA ApplicationsBrock Allen · NDC Oslo 2019
• 30mStandards-based authentication for JavaScript sitesKim Maida · backendlessConf_ 2019
• 12mReact and Auth0 working together to build more secure appsDaily Miranda · React Alicante 2019