The Okta Developer Blog is a place for developers to learn about identity, security, and building better applications.
8 min read
Modern authentication systems generate JSON Web Tokens (JWT). While there are several types of JWTs, we're concentrating on access tokens. When a user successfully logs in to an application, a JWT is generated. The token is then passed in all requests to the backend. The backend can then validate the…
Read more about How to Write a Secure Python Serverless App on AWS Lambda
5 min read
OAuth 2.0 is a protocol that controls authorization to access a secured resource such as a native app, web app, or API server. For native applications, the recommended method for controlling access between your application and a resource server is the Authorization Code flow with a Proof Key for Code…
Read more about Easy Xamarin Forms Auth with PKCE
5 min read
In this tutorial we are going down a different track then our last Ruby Post (bad pun intended). Instead diving into building a very simple API that, of course, we will secure with access tokens minted by our very own Okta OAuth server. We'll make requests to this API via…
Read more about The Rails Guide to Securing an API
4 min read
In the Apple operating systems macOS and iOS, software applications store essential configuration data in an information property list (plist) files. The plist files are managed by the operating system. Although macOS does have utilities for reading and writing plist files, they are low level. It's a manual and time-consuming…
Read more about Discovering macOS Settings with PlistWatch
4 min read
Implementing search functionality in your .NET Core apps doesn't have to be hard! Using Elasticsearch makes it easy to develop fast, searchable apps.
Read more about A Quick Guide to Elasticsearch for .NET
8 min read
The HTTP protocol powers the web. Traditionally, HTTP is a request-response protocol. This means that a client requests data from a server, and the server responds to that request. In this model, a server will never send data to a client without having been queried first.
Read more about Create a Secure Chat Application with Socket.IO and React
5 min read
We know unit testing is a vital part of the software development process. We also know us developers love to debate techniques, frameworks, strategies, and how different layers and components need testing. Unit tests are the most valuable when they are stable, fast, and reproducible.
Read more about Faster Spring Boot Testing with Test Slices5 min read
Note: In May 2025, the Okta Integrator Free Plan replaced Okta Developer Edition Accounts, and the Okta CLI was deprecated. We preserved this post for reference, but the instructions no longer work as written. Replace the Okta CLI commands by manually configuring Okta following the instructions in our Developer Documentation.
Read more about Update App Secrets with Jenkins CI and .NET Core
2 min read
Setting up a new YubiKey as a second factor is easy—your browser walks you through the entire process. However, setting up a YubiKey to sign your Git commits and Secure Shell (SSH) authentication is a very different experience. In this post, I'll walk through configuring a YubiKey and highlight some…
Read more about Developers Guide to GPG and YubiKey
5 min read
You know how you will see an ad on Instagram for something that you just searched for hours earlier? This is in no small part due to a special API for iOS that allows app developers to track your behavior across apps, even those by different developers. Well, all of…
Read more about What Apple's App Tracking Changes Mean for Developers
3 min read
In our last Kong and Okta tutorial, we will implement a basic access control policy based on Okta's groups and planes. This series will show you how to implement service authentication and authorization for Kong Konnect and Okta using the OpenID Connect (OIDC) plugin. Parts 1, 2 and 3 covered:
Read more about Set Access Control Policies With Kong Konnect and Okta
7 min read
FastAPI is really fast and SQLAlchemy is really...SQL-y. But what good is a fast and SQL-y application if it isn't secure?
Read more about Use Okta and Oso to Secure a FastAPI + SQLAlchemy App
Phill Edwards
Giorgi Dalakishvili
Andrew Van Beek
Gergely Sinka
Holger Schmitz
Ruslan Zaharov
Nickolas Fisher
Brian Demers
Aaron Parecki
Claudio Acquaviva
Gabe Jackson