API Security Practices

Focused View

Travis Thomsen

1:36:14

0 View

1. Course Overview

1. Course Overview.mp4

01:17

02. Understanding API Security

01. Version Check.mp4

00:08

02. Open Web Application Security Project.mp4

01:08

03. Unsafe Consumption of APIs.mp4

02:15

04. Improper Inventory Management.mp4

02:57

05. Security Misconfiguration.mp4

02:08

06. Server-side Request Forgery.mp4

02:42

07. Unrestricted Access to Sensitive Business Flows.mp4

02:29

08. Broken Function Level Authorization.mp4

01:38

09. Unrestricted Resource Consumption.mp4

02:12

10. Broken Object Property Level Authorization.mp4

01:43

11. Broken Authentication.mp4

03:37

12. Broken Object-level Authorization.mp4

01:59

13. API Security Best Practices.mp4

02:35

14. PCI Compliance for API Developers.mp4

01:25

03. Implementing Basic API Security

01. SSL Certificates.mp4

03:11

02. API Gateways.mp4

02:22

03. Rate Limiting.mp4

03:50

04. Cross-origin Resource Sharing.mp4

02:43

05. Demo - Setting up the API.mp4

04:06

06. Demo - Configuring an API Gateway with Rate Limiting.mp4

03:04

07. Demo - Rate Limiting.mp4

02:32

08. Demo - Cross-origin Resource Sharing.mp4

01:59

09. Demo - Using Environment Variables.mp4

01:25

10. Demo - Sanitizing User Input.mp4

02:28

11. Demo - Using a One Way Hash to Protect Passwords.mp4

02:10

12. Demo - Encrypting Sensitive Data.mp4

02:19

4. JSON Web Tokens

1. Understanding JSON Web Tokens.mp4

04:40

2. Using JSON Web Tokens.mp4

04:32

3. Configuring Your API to Use JSON Web Tokens.mp4

05:12

4. Using Refresh Tokens to Generate New Access Tokens.mp4

05:12

5. Using OAuth for API Authentication

1. Understanding OAuth 2.0.mp4

03:00

2. OAuth 2.0 vs. JSON Web Tokens.mp4

01:43

3. OAuth 2.0 Best Practices.mp4

03:30

4. Demo - Setting up Google OAuth.mp4

03:11

5. Demo - Using Google OAuth in Your APIs.mp4

02:52

Description

This course will teach you how to implement basic API security practices.

What You'll Learn?

In this course, API Security Practices, you’ll learn to implement API security. First, you’ll explore the threats that APIs face and how to mitigate them. Next, you'll implement the basics of API security using CORs, SSL, data sanitization, and rate limiting. Then, you'll discover how to transmit sensitive data securely. Finally, you’ll find out how to implement JSON Web Tokens and OAuth for authentication and authorization. When you’re finished with this course, you’ll have the skills and knowledge needed to secure your APIs.

More details

User Reviews

Rating

average 0

Total votes0

Focused display

API Testing

Travis Thomsen

Instructor's Courses

I have over 23 years of experience as a Software Developer and DevOps Engineer. I am passionate about learning new technologies, methodologies, languages and automation. Specialties: Node.JS, Puppet, Configuration Management Continuous Integration and DevOps.

Pluralsight

View courses Pluralsight

Pluralsight, LLC is an American privately held online education company that offers a variety of video training courses for software developers, IT administrators, and creative professionals through its website. Founded in 2004 by Aaron Skonnard, Keith Brown, Fritz Onion, and Bill Williams, the company has its headquarters in Farmington, Utah. As of July 2018, it uses more than 1,400 subject-matter experts as authors, and offers more than 7,000 courses in its catalog. Since first moving its courses online in 2007, the company has expanded, developing a full enterprise platform, and adding skills assessment modules.