Why Signed Authorization Requests Elevate Your Security
Signed authorization requests enhance the security of authentication flows and can be implemented as JWT-secured Authorization Requests (JARs). In...
Latest blog posts
Private Key JWT: A Stronger Alternative for Client Authentication
If you're familiar with OAuth 2.0 and OpenID Connect, you know that client applications must authenticate themselves to the authorization server as...
Securing Authentication Flows with JSON Web Encryption
We previously covered the fundamentals of JSON Web Encryption (JWE), an IETF standard designed to keep data confidential. In today’s blog post, we’ll...