May meeting - API Security

We have one talk planned, and an opening for one more.

Big thanks to Vipps for sponsoring the event

Talk(s) will be in English. The talks will not be recorded.

17:00 Food and mingle
17:30 Security at high speed - How Vipps secures their APIs (40min) - Nora Tomas
From the outside, login systems can seem very simple. In the Vipps app, for example, you just use biometrics (or a PIN code) and you're in with a blink of an eye! But how much work goes into creating such a system? What actually happens if someone steals my Vipps PIN code? And why doesn't Vipps just have a "login with Facebook" button? You'll get the answers to these questions in this presentation. We'll cover everything from the EU directive PSD2 to how to practically secure APIs so that the next time you log in to Vipps, you'll know what's happening behind the scenes!
18:15 npm provenance (10min) - Erlend Oftedal
Introduction to the recent supply chain additions added to npmjs.