| 001 - Part 1. Foundations.mp4 | 7.6 MB | ||
| 002 - Chapter 1 What is API security.mp4 | 58.4 MB | ||
| 003 - Chapter 1 What is an API.mp4 | 38.3 MB | ||
| 004 - Chapter 1 API security in context.mp4 | 46.2 MB | ||
| 005 - Chapter 1 Elements of API security.mp4 | 65 MB | ||
| 006 - Chapter 1 Environments and threat models.mp4 | 42.7 MB | ||
| 007 - Chapter 1 Security mechanisms.mp4 | 71.8 MB | ||
| 008 - Chapter 1 Audit logging.mp4 | 49.9 MB | ||
| 009 - Chapter 2 Secure API development.mp4 | 39.7 MB | ||
| 010 - Chapter 2 Implementation overview.mp4 | 46.1 MB | ||
| 011 - Chapter 2 Developing the REST API.mp4 | 51.1 MB | ||
| 012 - Chapter 2 Injection attacks.mp4 | 52.1 MB | ||
| 013 - Chapter 2 Preventing injection attacks.mp4 | 62.2 MB | ||
| 014 - Chapter 2 Input validation.mp4 | 92.1 MB | ||
| 015 - Chapter 2 Producing safe output.mp4 | 67.3 MB | ||
| 016 - Chapter 2 Preventing XSS.mp4 | 65 MB | ||
| 017 - Chapter 3 Securing the Natter API.mp4 | 56.8 MB | ||
| 018 - Chapter 3 Rate-limiting with Guava.mp4 | 37.2 MB | ||
| 019 - Chapter 3 Authentication to prevent spoofing.mp4 | 47.3 MB | ||
| 020 - Chapter 3 Creating the password database.mp4 | 40.1 MB | ||
| 021 - Chapter 3 Authenticating users.mp4 | 31.2 MB | ||
| 022 - Chapter 3 Using encryption to keep data private.mp4 | 66.7 MB | ||
| 023 - Chapter 3 Audit logging for accountability.mp4 | 58.4 MB | ||
| 024 - Chapter 3 Access control.mp4 | 78.4 MB | ||
| 025 - Chapter 3 Adding new members to a Natter space.mp4 | 46.7 MB | ||
| 026 - Part 2. Token-based authentication.mp4 | 5.2 MB | ||
| 027 - Chapter 4 Session cookie authentication.mp4 | 53.5 MB | ||
| 028 - Chapter 4 Serving the HTML from the same origin.mp4 | 53.1 MB | ||
| 029 - Chapter 4 Drawbacks of HTTP authentication.mp4 | 37.2 MB | ||
| 030 - Chapter 4 Token-based authentication.mp4 | 68.9 MB | ||
| 031 - Chapter 4 Session cookies.mp4 | 62.1 MB | ||
| 032 - Chapter 4 Cookie security attributes.mp4 | 70.1 MB | ||
| 033 - Chapter 4 Preventing Cross-Site Request Forgery attacks.mp4 | 69.2 MB | ||
| 034 - Chapter 4 Hash-based double-submit cookies.mp4 | 48.8 MB | ||
| 035 - Chapter 4 Double-submit cookies for the Natter API.mp4 | 82.6 MB | ||
| 036 - Chapter 4 Building the Natter login UI.mp4 | 40.5 MB | ||
| 037 - Chapter 4 Implementing logout.mp4 | 39.8 MB | ||
| 038 - Chapter 5 Modern token-based authentication.mp4 | 46 MB | ||
| 039 - Chapter 5 Adding CORS headers to the Natter API.mp4 | 50.4 MB | ||
| 040 - Chapter 5 Tokens without cookies.mp4 | 77.2 MB | ||
| 041 - Chapter 5 The Bearer authentication scheme.mp4 | 30.6 MB | ||
| 042 - Chapter 5 Storing tokens in Web Storage.mp4 | 30.1 MB | ||
| 043 - Chapter 5 Updating the CORS filter.mp4 | 44.4 MB | ||
| 044 - Chapter 5 Hardening database token storage.mp4 | 70.7 MB | ||
| 045 - Chapter 5 Protecting sensitive attributes.mp4 | 61.6 MB | ||
| 046 - Chapter 6 Self-contained tokens and JWTs.mp4 | 37.1 MB | ||
| 047 - Chapter 6 JSON Web Tokens.mp4 | 64.5 MB | ||
| 048 - Chapter 6 The JOSE header.mp4 | 39.8 MB | ||
| 049 - Chapter 6 Generating standard JWTs.mp4 | 48.9 MB | ||
| 050 - Chapter 6 Encrypting sensitive attributes.mp4 | 59.2 MB | ||
| 051 - Chapter 6 Authenticated encryption with NaCl.mp4 | 34.2 MB | ||
| 052 - Chapter 6 Encrypted JWTs.mp4 | 57 MB | ||
| 053 - Chapter 6 Using a JWT library.mp4 | 38.6 MB | ||
| 054 - Chapter 6 Using types for secure API design.mp4 | 45.4 MB | ||
| 055 - Chapter 6 Handling token revocation.mp4 | 87.4 MB | ||
| 056 - Part 3. Authorization.mp4 | 10 MB | ||
| 057 - Chapter 7 OAuth2 and OpenID Connect.mp4 | 68.5 MB | ||
| 058 - Chapter 7 The difference between scopes and permissions.mp4 | 42.3 MB | ||
| 059 - Chapter 7 Introducing OAuth2.mp4 | 73.8 MB | ||
| 060 - Chapter 7 The Authorization Code grant.mp4 | 68.9 MB | ||
| 061 - Chapter 7 Hardening code exchange with PKCE.mp4 | 41.5 MB | ||
| 062 - Chapter 7 Validating an access token.mp4 | 65.3 MB | ||
| 063 - Chapter 7 Securing the HTTPS client configuration.mp4 | 62.6 MB | ||
| 064 - Chapter 7 JWT access tokens.mp4 | 74.4 MB | ||
| 065 - Chapter 7 Encrypted JWT access tokens.mp4 | 33.4 MB | ||
| 066 - Chapter 7 Single sign-on.mp4 | 47.5 MB | ||
| 067 - Chapter 7 Hardening OIDC.mp4 | 66.7 MB | ||
| 068 - Chapter 8 Identity-based access control.mp4 | 60.9 MB | ||
| 069 - Chapter 8 LDAP groups.mp4 | 35.8 MB | ||
| 070 - Chapter 8 Role-based access control.mp4 | 59 MB | ||
| 071 - Chapter 8 Static roles.mp4 | 58.4 MB | ||
| 072 - Chapter 8 Attribute-based access control.mp4 | 48.2 MB | ||
| 073 - Chapter 8 Implementing ABAC decisions.mp4 | 52.7 MB | ||
| 074 - Chapter 8 Distributed policy enforcement and XACML.mp4 | 80.5 MB | ||
| 075 - Chapter 9 Capability-based security and macaroons.mp4 | 59 MB | ||
| 076 - Chapter 9 Capabilities and REST.mp4 | 44 MB | ||
| 077 - Chapter 9 Capabilities as URIs.mp4 | 59.5 MB | ||
| 078 - Chapter 9 Using capability URIs in the Natter API.mp4 | 48.5 MB | ||
| 079 - Chapter 9 HATEOAS.mp4 | 49.9 MB | ||
| 080 - Chapter 9 Capability URIs for browser-based clients.mp4 | 62.7 MB | ||
| 081 - Chapter 9 Hardening capability URIs.mp4 | 33.3 MB | ||
| 082 - Chapter 9 Macaroons Tokens with caveats.mp4 | 41.5 MB | ||
| 083 - Chapter 9 A macaroon token store.mp4 | 61.1 MB | ||
| 084 - Chapter 9 Third-party caveats.mp4 | 57.8 MB | ||
| 085 - Part 4. Microservice APIs in Kubernetes.mp4 | 7.7 MB | ||
| 086 - Chapter 10 Microservice APIs in Kubernetes.mp4 | 75.5 MB | ||
| 087 - Chapter 10 Deploying Natter on Kubernetes.mp4 | 28.2 MB | ||
| 088 - Chapter 10 Building H2 database as a Docker container.mp4 | 78.1 MB | ||
| 089 - Chapter 10 Deploying the database to Kubernetes.mp4 | 66.6 MB | ||
| 090 - Chapter 10 Building the Natter API as a Docker container.mp4 | 47.5 MB | ||
| 091 - Chapter 10 The link-preview microservice.mp4 | 62.5 MB | ||
| 092 - Chapter 10 Preventing SSRF attacks.mp4 | 81.1 MB | ||
| 093 - Chapter 10 DNS rebinding attacks.mp4 | 36.4 MB | ||
| 094 - Chapter 10 Securing communications with TLS.mp4 | 52.7 MB | ||
| 095 - Chapter 10 Using a service mesh for TLS.mp4 | 67.8 MB | ||
| 096 - Chapter 10 Locking down network connections.mp4 | 62 MB | ||
| 097 - Chapter 10 Securing incoming requests.mp4 | 70.3 MB | ||
| 098 - Chapter 11 Securing service-to-service APIs.mp4 | 46.5 MB | ||
| 099 - Chapter 11 The OAuth2 client credentials grant.mp4 | 64.1 MB | ||
| 100 - Chapter 11 The JWT bearer grant for OAuth2.mp4 | 73 MB | ||
| 101 - Chapter 11 Generating the JWT.mp4 | 48.6 MB | ||
| 102 - Chapter 11 Mutual TLS authentication.mp4 | 72 MB | ||
| 103 - Chapter 11 Verifying client identity.mp4 | 49 MB | ||
| 104 - Chapter 11 Using a service mesh.mp4 | 68.5 MB | ||
| 105 - Chapter 11 Certificate-bound access tokens.mp4 | 88.3 MB | ||
| 106 - Chapter 11 Managing service credentials.mp4 | 75.8 MB | ||
| 107 - Chapter 11 Key and secret management services.mp4 | 81.2 MB | ||
| 108 - Chapter 11 Avoiding long-lived secrets on disk.mp4 | 36.6 MB | ||
| 109 - Chapter 11 Key derivation.mp4 | 52 MB | ||
| 110 - Chapter 11 Service API calls in response to user requests.mp4 | 64.2 MB | ||
| 111 - Chapter 11 OAuth2 token exchange.mp4 | 70.8 MB | ||
| 112 - Chapter 11.OAuth2 token exchange.mp4 | 38.7 MB | ||
| 113 - Part 5. APIs for the Internet of Things.mp4 | 7.5 MB | ||
| 114 - Chapter 12 Securing IoT communications.mp4 | 50 MB | ||
| 115 - Chapter 12 Datagram TLS.mp4 | 47.4 MB | ||
| 116 - Chapter 12 Datagram TLS.mp4 | 70.6 MB | ||
| 117 - Chapter 12 Datagram TLS.mp4 | 44 MB | ||
| 118 - Chapter 12 Cipher suites for constrained devices.mp4 | 49.2 MB | ||
| 119 - Chapter 12 Cipher suites for constrained devices.mp4 | 50.7 MB | ||
| 120 - Chapter 12 Cipher suites for constrained devices.mp4 | 37.7 MB | ||
| 121 - Chapter 12 Pre-shared keys.mp4 | 56.5 MB | ||
| 122 - Chapter 12 The PSK client.mp4 | 67.1 MB | ||
| 123 - Chapter 12 End-to-end security.mp4 | 57 MB | ||
| 124 - Chapter 12 COSE.mp4 | 56.3 MB | ||
| 125 - Chapter 12 Alternatives to COSE.mp4 | 55.1 MB | ||
| 126 - Chapter 12 Misuse-resistant authenticated encryption.mp4 | 46.5 MB | ||
| 127 - Chapter 12 Misuse-resistant authenticated encryption.mp4 | 61.7 MB | ||
| 128 - Chapter 12 Key distribution and management.mp4 | 69.5 MB | ||
| 129 - Chapter 12 Ratcheting for forward secrecy.mp4 | 30.8 MB | ||
| 130 - Chapter 12 Post-compromise security.mp4 | 86.8 MB | ||
| 131 - Chapter 13 Securing IoT APIs.mp4 | 51.2 MB | ||
| 132 - Chapter 13 Device certificates.mp4 | 52.6 MB | ||
| 133 - Chapter 13 End-to-end authentication.mp4 | 78.5 MB | ||
| 134 - Chapter 13 OSCORE.mp4 | 81.7 MB | ||
| 135 - Chapter 13 Avoiding replay in REST APIs.mp4 | 76.1 MB | ||
| 136 - Chapter 13 OAuth2 for constrained environments.mp4 | 45.3 MB | ||
| 137 - Chapter 13 OAuth2 for constrained environments.mp4 | 51.8 MB | ||
| 138 - Chapter 13 Offline access control.mp4 | 39.1 MB | ||
| 139 - Chapter 13 Offline authorization.mp4 | 56.2 MB | ||
| Bonus Resources.txt | 307.2 B | ||
| Get Bonus Downloads Here.url | 204.8 B | ||
| ▲ 141 total files | |||
API Security in Action video edition
MP4 | Video: h264, 1280x720 | Audio: AAC, 44.1 KHz, 2 Ch
Genre: eLearning | Language: English | Duration: 139 Lessons (20h 12m) | Size: 2.36 GB
A comprehensive guide to designing and implementing secure services. A must-read book for all API practitioners who manage security.
A web API is an efficient way to communicate with an application or service. However, this convenience opens your systems to new security risks. API Security in Action gives you the skills to build strong, safe APIs you can confidently expose to the world. Inside, you’ll learn to construct secure and scalable REST APIs, deliver machine-to-machine interaction in a microservices architecture, and provide protection in resource-constrained IoT (Internet of Things) environments.
about the technology
APIs control data sharing in every service, server, data store, and web client. Modern data-centric designs—including microservices and cloud-native applications—demand a comprehensive, multi-layered approach to security for both private and public-facing APIs.
about the book
API Security in Action teaches you how to create secure APIs for any situation. By following this hands-on guide you’ll build a social network API while mastering techniques for flexible multi-user security, cloud key management, and lightweight cryptography. When you’re done, you’ll be able to create APIs that stand up to complex threat models and hostile environments.
what's inside
Authentication
Authorization
Audit logging
Rate limiting
Encryption
| torrent name | size | uploader | age | seed | leech |
|---|---|---|---|---|---|
| 276.2 MB | freecoursewb | 1 year | 9 | 9 | |
| 1.5 GB | freecoursewb | 1 year | 6 | 2 | |
| 2.1 GB | freecoursewb | 1 year | 4 | 3 | |
| 1.2 GB | freecoursewb | 2 years | 2 | 0 | |
| 1.1 GB | freecoursewb | 2 years | 1 | 1 |
All Comments