Securing Your API Endpoints - A Practical Guide w/ Seth Petry-Johnson

Abstract:

It's never been easier to expose services over HTTP. It's also never been easier to inadvertently expose security holes via those same services.

This session is designed for the average developer/architect that wants a brief overview of API security without getting into the weeds of cryptography or complex authentication frameworks. You'll learn about OAuth, API Keys, HMAC, JSON Web Tokens (JWT) and more. Don't worry if those things sound foreign; they'll be explained in a clear, practical way so that you’ll be able to choose the appropriate tool for your specific needs.

Bio:

Seth spent 21 years as a professional developer/architect before finally joining the dark side of management. He now spends his days as a pointy-haired boss leading a small-but-mighty product development team in the search for elegant solutions to complex problems. He is passionate about clean architecture, testable systems, and bringing order to chaos. Seth lives in Columbus, OH and is an active participant in the Midwest developer community. He'll write TPS reports when he has to, but still enjoys writing, reviewing, and talking about code.