SKU/Artículo: AMZ-B0G3CJDBFC
Advanced API Security and Identity Management: Implementing OAuth 2.1, OpenID Connect, and JWT for Secure Service-to-Service Authentication.
Format:
Kindle
Detalles del producto
Disponibilidad:
Fuera de stock
Fuera de stock
Peso con empaque:
0.76 kg
0.76 kg
Devolución:
No
No
Condición
Nuevo
Nuevo
Producto de:
Amazon
Amazon
Viaja desde
USA
USA
Sobre este producto
- The perimeter is dead. Identity is the new firewall. In the era of monolithic applications, security was simple: you built a wall around your network, and anyone inside was trusted. Today, that world is gone. We build distributed systems composed of hundreds of microservices, running on infrastructure we do not own, communicating over networks we do not control. In this cloud-native reality, a static firewall is no match for dynamic threats. The only true perimeter left is identity. Advanced API Security and Identity Management is the definitive playbook for backend developers and architects who need to secure the nervous system of the modern enterprise. This is not a theoretical textbook filled with abstract diagrams; it is a hands-on, code-first guide to implementing the industry’s most rigorous security standards using Python. If you have ever struggled to understand the difference between an ID Token and an Access Token, or if you have copied and pasted authentication code hoping it works, this book is for you. It dismantles the complexity of OAuth 2.1, OpenID Connect (OIDC), and JSON Web Tokens (JWTs), transforming them from confusing acronyms into powerful architectural tools. Inside, you will learn how to:Master OAuth 2.1: Move beyond the deprecated Implicit and Password grants. Learn to implement the Authorization Code Flow with PKCE and Client Credentials Flow to secure both human users and machine-to-machine communication.Architect Zero Trust: Stop trusting your internal network. Implement Mutual TLS (mTLS) and private Certificate Authorities to ensure that every packet traveling between your services is cryptographically verified.Operationalize JWTs: Deep dive into the anatomy of a token. Implement robust strategies for signing, validation, automated key rotation, and "jittered" expiration to prevent thundering herd outages.Secure Service-to-Service Communication: Solve the "Delegation Problem" using RFC 8693 Token Exchange, allowing identity context to flow securely through complex microservice chains without leaking privileges.Defend Against Advanced Threats: Go beyond basic authentication to implement defense-in-depth strategies, including rate limiting with Redis, detecting token replay attacks, and neutralizing injection vulnerabilities.Achieve Compliance as Code: Translate complex regulations like GDPR, HIPAA, and PSD2 into concrete engineering controls, from PII redaction in logs to enforcing Strong Customer Authentication (SCA).Whether you are building a fintech platform that processes millions of dollars or a healthcare API handling sensitive patient data, relying on "security by obscurity" is a strategy for failure. This book provides the blueprint for building systems that are secure by design. It empowers you to stop hoping your APIs are safe and start proving it. Don't just build endpoints. Build a fortress.
Fuera de stock
Selecciona otra opción o busca otro producto.
Este producto viaja
de USA ![]()
a tus manos en
![]()
a tus manos en
Compra protegida
Disfruta de una experiencia de compra segura y confiable
Tarjetas de Crédito y Débito
Visa
Mastercard
American Express
Pagos a través de PayPal
Compra procesada en dólares con dinero en cuenta o tarjetas internacionales.
Paypal
Pagos a través de MODO
Compra procesada en pesos desde la App de tu banco.
PayPal
Tienes garantía de entrega 