Access Control for your API Endpoints with Auth0
summary
Builds a local HTTPS single‑page app, creates an Auth0 tenant and an API, and wires the Auth0 SPA SDK to request an access token (audience set to the API). Registers a scope called read:secret, enables role-based access control, creates an admin role, assigns it to a user, and calls a serverless Lambda behind API Gateway. The call is denied until the app sends the access token; with the token and role set the API returns the secret.
AI-written summary · about
chapters (10)
- 0:00Start
- 10:55Management Dashboard
- 14:14Javascript Sdk
- 15:55Set the Allow Callback Url
- 19:04Ssl Certificate
- 20:30The Sample Application
- 37:00Get the Access Token
- 41:35What Authorization and Access Control Is
- 41:55Role Based Access Control
- 42:23Implement Row Based Access Control
related talks
48mAccess Control for your API Endpoints with Auth0
53mAccess Control for your API Endpoints
01h 02mDemystifying Web API Security in Azure
37mOne Auth to Rule them All: Centralizing Authentication with Azure and API Gateway
53mWeb API Security With Azure Active Directory
20mBuilding a secure API: Overview of techniques and technologies needed to launch a secure API
30mHeard you liked access, so we built Access to...
31mAuthorised is Not a Yes No Question