1 min read
OAuth Sketch Notes - Live Q&A
Why do we need PKCE in OAuth? How does PKCE work? What's the difference between the front channel and back channel? Can SPAs even use a back channel?
Read more about OAuth Sketch Notes - Live Q&AOkta Developer Blog
The Okta Developer Blog is a place for developers to learn about identity, security, and building better applications.
Browse all posts
Protecting a Laravel API with JWT
6 min read
With the increasing popularity of single-page apps and the growing API economy, JSON Web Tokens (JWTs) are becoming a very popular method for authenticating users. Rather than relying on the server to store the user's state, JWTs encode information in a keyed payload stored on the client.
Read more about Protecting a Laravel API with JWT
Five Engineering Stories That Will Make Your Blood Curdle
6 min read
If you've been an engineer for any considerable time, you've probably made some mistakes that made you want to crawl under your desk and hide. You may have even considered packing up your desk!
Read more about Five Engineering Stories That Will Make Your Blood Curdle
Develop Secure Apps with WebSockets and Node.js
5 min read
WebSockets is a technology for communicating between the client and the server in a web application, where an open socket creates a persistent connection between the client and the server. This method of communication works outside of the HTTP request/response paradigm that has existed since the earliest days of the…
Read more about Develop Secure Apps with WebSockets and Node.js
Why I Love IntelliJ IDEA for Java Development
8 min read
If you're a Java developer like me, you like to crank out code and get shit done. I like many things about IntelliJ IDEA, but I thought it'd be fun to write about the ones that make me most productive. First, a bit of my development history.
Read more about Why I Love IntelliJ IDEA for Java Development
How to Authenticate with SAML in ASP.NET Core and C#
7 min read
Security Assertion Markup Language, more commonly known as SAML, is an open standard for exchanging authentication and authorization data between parties. Most commonly these parties are an Identity Provider and a Service Provider. The primary use case for SAML has typically been to provide single sign-on (SSO) for users to…
Read more about How to Authenticate with SAML in ASP.NET Core and C#
Setup a Mute Indicator Light for Zoom with Hammerspoon
6 min read
In this post, I'm going to show you how to set up a light that will turn on when you're in a Zoom call. The color of the light will show your mute status, red will indicate that you're muted, and green if you are not muted.
Read more about Setup a Mute Indicator Light for Zoom with Hammerspoon
Build a Video Chat Service with JavaScript, WebRTC, and Okta
6 min read
If you are familiar with any sort of real-time communications over the internet such as GoToMeeting, Google Meet, or Discord then chances are you have used WebRTC. WebRTC is an open framework for handling real-time communications. It supports video, voice, or any data between peers. WebRTC is supported by Google,…
Read more about Build a Video Chat Service with JavaScript, WebRTC, and Okta
Create a Secure Ktor Application with Kotlin
8 min read
In this tutorial, you will build your very own Nano Blogging Service (nabl for short) using a modern JVM stack. This includes using the Kotlin programming language, the Ktor web framework, and securing it with Okta. Users can log in or sign up, post updates, and browse specific or global…
Read more about Create a Secure Ktor Application with Kotlin
What's New in Laravel 8
8 min read
With Laravel 8's release in September 2020, the popular PHP framework continues to offer new features and improvements. After version 5, Laravel moved to semantic versioning and the more frequent releases have meant smaller changes between each one. That said, there are still several exciting updates in this version of…
Read more about What's New in Laravel 8
Spring Security SAML and Database Authentication
6 min read
Spring Boot is a ubiquitous and well-supported suite of tools for developing web applications in Java. Database authentication, in which credentials identifying authorized users are stored in a database accessible by the application, is maybe the most common and straightforward method of authenticating users. SAML is a well-supported open standard…
Read more about Spring Security SAML and Database AuthenticationBuild a Modern API using Fastify and Node.js
4 min read
Fastify is just as the name implies, fast. Not just in terms of development speed—its low overhead means the server is fast as well. When writing APIs, speed on both sides is paramount. Fastify is a web framework for Node.js that was designed for efficiency. Fastify is fully extensible with…
Read more about Build a Modern API using Fastify and Node.js
Aaron Parecki
Karl Hughes
Lee Brandt
Nickolas Fisher
Matt Raible
Nick Gamb
Joël Franusic
Ruslan Zaharov
Joe Cavazos