The Okta Developer Blog is a place for developers to learn about identity, security, and building better applications.
6 min read
Even if you've never heard of the OAuth 2.0 Device Authorization Grant, formerly known as the Device Flow, you've probably seen it in action on a smart TV or other streaming device. The Device Authorization Grant is commonly used on devices with limited keyboard input ability. The process allows you…
Read more about Command Line Login with the OAuth Device Grant
6 min read
Apache APISIX is a dynamic, real-time, high-performance API gateway, providing rich traffic management. The project offers load balancing, dynamic upstream, canary release, circuit breaking, authentication, observability, and many useful plugins. In addition, the gateway supports dynamic plugin changes along with hot-plugging. The OpenID Connect plugin for Apache APISIX allows users…
Read more about Centralize Authentication at the Gateway with Apache APISIX and OpenID Connect
7 min read
Modern applications must work smoothly on high loads and with a high number of concurrent users. Traditional Java applications run blocking code and a common approach for scaling is to increase the number of available threads. When latency comes into the picture, many of these additional threads sit idle, wasting…
Read more about How to Prevent Reactive Java Applications from Stalling
1 min read
Amaze us! Build something unique and wonderful with early access to our new Okta Identity Engine Limited GA release. Here's how you can get involved.
Read more about Join the Okta Identity Engine Early Access Hackathon 2021 Challenge
5 min read
Amazon Web Services is one of the most popular cloud computing platforms on the planet. There's a good chance you will need to work in an AWS environment, which means publishing to one of their web server services like Elastic Beanstalk. The AWS platform is enormous, and this can be…
Read more about Using AWS Toolkit for Visual Studio
7 min read
ASP.NET Web Forms framework has been the cornerstone technology of .Net for web development since the release of .Net Framework in 2002. ASP.NET Web Forms includes a layer of abstraction for developers so that you don't need to care about HTML, JavaScript, or any other front-end technology. It provides a…
Read more about Web Forms Migration to Blazor in .NET Core
5 min read
The Networking and Cryptography library (NaCl pronounced "salt") is a software library that provides the core operations required to build cryptographic tools. Sodium is a fork of NaCl with an extended API; it's portable, and binaries are available to be used by various programming languages and operating systems. It comes…
Read more about Getting Started with Libsodium in Python and Go
7 min read
Content negotiation allows for an HTTP server to respond to different types of clients. Many modern clients expect a JSON response, but there may be a need to format responses differently, maybe XML for older clients or a binary format for newer ones. Content negotiation is the mechanism used to…
Read more about Content Negotiation with a Java MicroProfile Application
8 min read
Many websites have JavaScript functions that make network requests to a server, such as a REST API. The web pages and APIs are often in different domains. This introduces security issues in that any website can request data from an API. Cross-Origin Resource Sharing (CORS) provides a solution to these…
Read more about Fixing Common Problems with CORS and JavaScript
5 min read
Spring ẀebClient was added as part of the reactive web stack WebFlux in Spring Framework 5.0. WebClient allows performing HTTP requests in reactive applications, providing a functional and fluent API based on Reactor, and enabling a declarative composition of asynchronous non-blocking requests without the need to deal with concurrency. One…
Read more about Spring WebClient for Easy Access to OAuth 2.0 Protected Resources5 min read
Toggling functionality using feature flags in .NET Core apps is quite straightforward, especially with a neat little feature flag management service.
Read more about How to Toggle Functionality in C# with Feature Flags
9 min read
Spring Cloud Sleuth allows you to aggregate and track log entries as requests move through a distributed software system. In a monolithic system, it's relatively easy to track requests as they move through the codebase because all requests can easily be logged to the same log file. You can generally…
Read more about Easy Distributed Tracing with Spring Cloud Sleuth
Huan Liu 
Lars K. Johansen
Xinxin Zhu
Jimena Garbarino
Joyce
Nickolas Fisher
Giorgi Dalakishvili
Phill Edwards
Brian Demers
Gergely Sinka
Andrew Hughes