Comparing Web/Mobile API Authentication Models скачать в хорошем качестве

Comparing Web/Mobile API Authentication Models

Twitter: @webpwnized Thank you for watching. Please upvote and subscribe. Web and mobile applications often access Application Programming Interfaces (API) exposed by web services to the Web/Internet. Various models exist dating back several years and a couple of the models are relevant options for today. Some models are obsolete but still used. In this video, we compare and contrast the models at a high level without being overly brand specific. All of the models have strengths and weaknesses but some are better than others. Development teams should use a modern model that avoids passing credentials or passwords on every request and ensures that a reasonable session management mechanism is in place. The security of the API and the data itself depend on using an authentication model that implements session management, strong cryptography, and other security controls.