The Okta Developer Blog is a place for developers to learn about identity, security, and building better applications.
4 min read
Many decisions go into the process of creating a secure website. One of these decisions is selecting which HTTP security headers to implement. Today, we'll dive into the most important HTTP security headers and the best practices that will strengthen your website's security.
Read more about An Overview of Best Practices for Security Headers
2 min read
Hi, I'm edunham, and I'm an infra person. Our buzzwords include DevOps, Cloud Operations, and Site Reliability Engineering, though if you ask any two of us about the difference between those terms, you'll get at least three answers. Whatever name it's wearing, doing ops well requires not only the "how"…
Read more about From Ops To Advocacy
12 min read
In this tutorial, we will leverage OpenID Connect (OIDC) to allow our DevOps team to securely access their EKS clusters on AWS. We use Role Based Access Control (RBAC)] to enforce the least privilege required without the need to configure AWS IAM roles. 😎
Read more about Secure Access to AWS EKS Clusters for Admins
1 min read
As many of you may know, Okta completed the acquisition of Auth0 in May of 2021. We've since been busy, working out how our products will work together to help developers provide the best experiences for their users. If you joined us for Developer Day, you saw Okta and Auth0…
Read more about Okta Developer Plan Changes
11 min read
In this tutorial, you are going to create a single-page application (SPA) that uses a Spring Boot resource server and a Vue front-end client. You'll see how to configure Spring Boot to use JSON Web Tokens (JWT) for authentication and authorization, with Okta as an OAuth 2.0 and OpenID Connect…
Read more about Learn How to Build a Single-Page App with Vue and Spring Boot
5 min read
A common OAuth 2.0 question we get: "How do I deal with OAuth in a load-balanced application?" The short answer: There's nothing specific about session clustering for OAuth. The longer answer is—you likely still need to worry about cluster session management. This post will discuss how an OAuth login relates…
Read more about Session Clustering for OAuth 2.0 Applications
3 min read
Back in early August, in partnership with DevPost, we announced the Okta Identity Early Access Hackathon, and invited developers everywhere to "build something awesome with the Okta Identity Engine (OIE) Limited GA release."
Read more about Announcing the Okta Identity Early Access Hackathon Winners
3 min read
In the fall of 2020, the Spring team released a new experimental Spring Native project that gave Spring developers hope for faster startup times. Spring Native is all about converting your Spring applications to native executables. It leverages GraalVM to make it happen. This announcement was huge because the new…
Read more about Spring Native in Action with the Okta Spring Boot Starter
4 min read
When it comes to code quality and code security, SonarQube is your teammate! This analysis tool is pretty straightforward to use, especially with some help from Docker.
Read more about How to Write Cleaner, Safer Code with SonarQube, Docker and .NET Core
8 min read
At a very high level, the SCIM (System for Cross-Identity Management) protocol exists to provision and sync users and groups across various, independent systems. There is some room for nuance in the SCIM spec. In this post we will take a look at some basic SCIM operations. We'll peek under…
Read more about How to Build a Flask SCIM Server Configured for Use with Okta
2 min read
It's been a big year for Okta and Auth0. Our two companies have officially joined forces over the past few months, and we are excited about the chance to shape the future of identity together. It's great to celebrate our combined developer communities at the first Developer Day event.
Read more about Developer Day 2021: Celebrating the Future of Identity
Vickie
Deepu K Sasidharan
E. Dunham
Nico Triballier
Ryan Stewart
Andrew Hughes
Brian Demers
Joyce
Matt Raible
Paweł
Cale Switzer
Ali Spivak