How To's

An important security consideration in building a server-side OAuth 2.0 client is leakage of access tokens at the resource server. In this writing, we will discuss a mitigation technique related to this threat based on the use of resource-specific access tokens, and introduce a JavaScript library for implementing this approach in the Node.js environment. Basic knowledge of the OAuth 2.0 framework will be helpful to and is expected of the reader.

Easy and secure implementation of the authorization code grant in a Node.js application with resource-specific access tokens support.

Additional steps for providing SSO experience when building OAuth 2.0 clients with the AppAuth SDK for iOS.

Instructions for using AM to implement CIBA

Using Service Workers to build an identity proxy for your JS apps

Instructions for extending push notifications to include geolocation data.