The Okta Developer Blog is a place for developers to learn about identity, security, and building better applications.
6 min read
Note: In May 2025, the Okta Integrator Free Plan replaced Okta Developer Edition Accounts, and the Okta CLI was deprecated. We preserved this post for reference, but the instructions no longer work as written. Replace the Okta CLI commands by manually configuring Okta following the instructions in our Developer Documentation.
Read more about OAuth 2.0 Patterns with Spring Cloud Gateway
4 min read
The topic of validating an OAuth 2.0 access tokens comes up frequently on this blog. Often we talk about how to validate JSON Web Token (JWT) based access tokens; however, this is NOT part of the OAuth 2.0 specification. JWTs are so commonly used that Spring Security supported them before…
Read more about JWT vs Opaque Access Tokens: Use Both With Spring Boot
4 min read
Arm processors have been in the news lately, and it's causing confusion and worries about processor performance for some folks. After Apple announced its plan to switch to Arm-based processors, I heard people (incorrectly!) speculating the performance would be similar to a Raspberry Pi. Java on Arm is nothing new,…
Read more about Arm Up Your Java: Performance Benchmarks
2 min read
Over the past few months, I have been working on a side project that I am really excited about. If you know me well, you probably know I enjoy using my side projects to help other teams meet their goals (and if you don't, I am a Senior Security H@X0R…
Read more about Announcing the New Okta Developer Certification
2 min read
Authentication is an important part of today's mobile applications, but securely implementing authentication in a mobile app can be a daunting task. In this article, you will learn how to create a basic cross-platform application with Xamarin.Forms and use the WebAuthenticator class from Xamarin.Essentials together with Okta to quickly and…
Read more about Easy Xamarin Essentials with Web Authenticator
8 min read
.NET Core version 3.1 just came out as of writing this article. It includes a new version of Entity Framework (EF) Core, the next generation of Microsoft's tried and tested Object Relational Mapper (ORM). Entity Framework has been used alongside ASP.NET for years and has developed a reputation for being…
Read more about Build Awesome APIs with Entity Framework Core
5 min read
Java is one of the most mature and persistent development languages that exists. Recently, it shifted to a 6-month release schedule, enabling it to deliver more frequent updates to the language. One of the changes introduced in Java 9 was the modular system.
Read more about Build a Spring Boot Application Using Java Modules
4 min read
PASETO is a new security token format designed to be easy to use and free from the issues inherent with JSON Web Token (JWT) related specifications. Platform Agnostic SEcurity TOkens (PASETO) is a draft RFC spec created by Scott Arciszewski. PASETO reduces the scope of the JavaScript Object Signing and…
Read more about Introducing JPaseto: Security Tokens For Java
4 min read
When I decided to transition away from being a Principal Enterprise Architect into a specialized identity engineering role, a number of my colleagues asked me why. My answer has always been this:
Read more about Identity: A First Class Architectural Citizen?
5 min read
Okta is an identity platform focused on making authentication easy to build with minimal code, and you'll often hear us say that by using Okta you'll never have to build authentication again.
Read more about Build Easy User Sync Webhooks with Okta7 min read
Koa is a web framework from the makers of Express. Koa is designed to be middleware-driven and extremely lightweight. It is so lightweight that it comes without any middleware on its own. But not to fear, there are plenty of packages available for basic functionality such as routing, authentication, body…
Read more about Build A Secure Node.js API with KoaJS
7 min read
Serverless computing, sometimes referred to as "functions as a service" (FaaS), is an on-demand approach to providing backend application services. The serverless architecture is an excellent solution for many use cases where an application needs backend services occasionally, periodically (e.g., once a day), or dynamically scaled to meet demand.
Read more about Build and Deploy Secure Serverless Functions with Netlify
Jimena Garbarino
Brian Demers
Micah Silverman
Giorgi Dalakishvili
Nickolas Fisher
Bruno Leite
Chris Gustafson
Heather Wallander
David Neal