Towards a standard for bearer token URLs – Neil Madden

In XSS doesn't have to be Game Over, and earlier when discussing Can you ever (safely) include credentials in a URL?, I raised the possibility of standardising a new URL scheme that safely allows encoding a bearer token into a URL. This makes it more convenient to use lots of very fine-grained tokens rather than one…

web-security – Neil Madden

API Tokens: A Tedious Survey · The Fly Blog

Insufficient access controls for APIs

20 Best API Development Books of All Time - BookAuthority

GitHub - lamw/vmworld2021-session-urls

OAuth 2 in Action eBook : Richer, Justin, Sanso, Antonio: Kindle Store

Security Patterns in Practice: Designing Secure Architectures Using Software Patterns (Wiley Software Patterns Series) 1, Fernandez-Buglioni, Eduardo, eBook

API Tokens: A Tedious Survey · The Fly Blog

Episode 526: Brian Campbell on Proof-of-Possession Defenses : Software Engineering Radio

Neil Madden – Page 2 – Neil Madden

The WiKID Strong Authentication Systems Overview

Federation