The A to Z of API AuthoriZation

APIs offer immense potential for app developers to build innovative tools leveraging a customer’s existing data. However, navigating the world of API authorization with its labyrinth of acronyms and protocol flows can be confusing. Have you got an API token or an access token? What’s the difference between 2-legged OAuth, 3-legged OAuth, and OpenID Connect? And how does this all protect my user’s passwords, while giving my apps a way to access their data? Get it right, and you unlock massive opportunities, but get it wrong and you can compromise your apps and your user’s data.

In this session well demystify key API authorization concepts, discuss how they relate to public Atlassian APIs (now and in the future), and describe best practices for keeping your apps secure.

Видео The A to Z of API AuthoriZation канала Atlassian