Make your SPA a maximum security prison

Embed

Start on current slide

Slide 1

Slide 1 text

Slide 2

Slide 2 text

@woloski @mgonto CTO & Founder Auth0 Dev Advocate Auth0

Slide 3

Slide 3 text

Identity made simple for developers

Slide 4

Slide 4 text

Authentication for Modern Applications using Tokens angular-‐storage  ! angular-‐jwt

Slide 5

Slide 5 text

Browser Web Server auth C C Most of the web

Slide 6

Slide 6 text

Browser Web Server (Python) Realtime (Node) C M modern apps

Slide 7

Slide 7 text

Browser Web Server (Python) Realtime (Node) C M ! Cookies are coupled to the web framework modern apps

Slide 8

Slide 8 text

Browser Web Server (Python) Realtime (Node) C M API (Node) A Phones Tablets A modern apps

Slide 9

Slide 9 text

Browser Web Server (Python) Realtime (Node) C M API (Node) A APIs don’t use Cookies Phones Tablets A modern apps

Slide 10

Slide 10 text

Browser Web Server (Python) Realtime (Node) C M API (Ruby) API (Node) A A Phones Tablets A modern apps

Slide 11

Slide 11 text

Browser Web Server (Python) Realtime (Node) C M API (Ruby) API (Node) A A FIREBASE F Phones Tablets A modern apps

Slide 12

Slide 12 text

Browser Web Server (Python) Realtime (Node) C M API (Ruby) API (Node) A A ! Cookies don’t “ﬂow” FIREBASE F Phones Tablets A modern apps

Slide 13

Slide 13 text

A better approach Token-based Authentication JSON Web Tokens

Slide 14

Slide 14 text

auth0/angularjs-jwt-authentication-tutorial Demo time!

Slide 15

Slide 15 text

Browser modern apps Web Server (Python) Realtime (Node) API (Ruby) API (Node) AWS S3 Phones Tablets

Slide 16

Slide 16 text

5 t-shirts Bitcoins Stickers Thanks!