4: Alex Bilbie - OAuth 2 and API Security

FromFull Stack Radio

Start listening View podcast show

4: Alex Bilbie - OAuth 2 and API Security

FromFull Stack Radio

ratings:

Length:

56 minutes

Released:

Dec 8, 2014

Format:

Podcast episode

Description

In this episode, Adam gets super technical with Alex Bilbie about the OAuth 2 specification. They talk about the different grant types and what they're each appropriate for, as well as discuss some potential API security strategies for one of Adam's personal projects.

Released:

Dec 8, 2014

Format:

Podcast episode

Titles in the series (100)

A podcast for developers interested in building great software products. Every episode, Adam Wathan is joined by a guest to talk about everything from product design and user experience to unit testing and system administration.

Skip carousel

21: Chad Pytel - Sticking to your guns: In this episode, Adam talks to Chad Pytel, CEO of thoughtbot. Chad gives tips for balancing client work with internal product work, growing your client-base without compromising your principles, and applying Jobs to be Done to new client projects. This e by Full Stack Radio
49 min listen
11: Jeffrey Way - "But how does it feel?": In this episode, Adam talks with Jeffrey Way of Laracasts about learning, object oriented design, testing, API usability, and whole bunch of other stuff. This episode is brought to you by Hired. by Full Stack Radio
68 min listen
6: Chris Fidao - Servers for Hackers: In this episode, Adam talks with Chris Fidao of Userscape. They talk about things every web developer should know about server administration, platform-as-a-service vs. self-hosting, Ansible, Docker, and more. by Full Stack Radio
42 min listen
1: Matt Stauffer - CSS Semantics: In our very first episode, Adam talks with Matt Stauffer of Tighten Co about OOCSS, BEM, SMACSS, preprocessors, common architecture pitfalls, and CSS semantics. by Full Stack Radio
49 min listen
8: Sean Devine - Ember and API first: In this episode, Adam talks with Sean Devine, host of the Ruby on Rails podcast. Sean gives Adam an introduction to building applications with Ember, and how it's different than the way you might sprinkle AngularJS into a mostly server-side app. They talk by Full Stack Radio
58 min listen
9: David Heinemeier Hansson - Architecture, Patterns and Design: In this episode, Adam talks with David Heinemeier Hansson, partner at Basecamp and creator of Ruby on Rails. They talk about the pursuit of "purity", Domain Driven Design, ActiveRecord vs DataMapper, and developing an eye for "good code". by Full Stack Radio
53 min listen
25: Matt Machuga - Tips and tricks to make your code awesome: In this episode, Adam talks to recurring guest Matt Machuga about tips and tricks that lead to better code. They talk about bringing functional programming concepts to OO, simple patterns for cleaning up typical MVC web app code, and about how imposing c by Full Stack Radio
50 min listen
23: Chris Hunt - How GitHub does remote work: In this episode, Adam talks to the Healthy Hacker, Chris Hunt, about how his team at GitHub works remotely. They also talk about entertaining your audience at conferences, taking a Codecation, and adventure motorcycling. This episode is brought to you by by Full Stack Radio
38 min listen
5: Ryan Singer - Jobs-to-be-Done and Product Design: In this episode, Adam talks with Ryan Singer of Basecamp about Jobs-to-be-Done thinking, UX, and product design. by Full Stack Radio
47 min listen
10: Type Safety Roundtable with Ryan Tablada and Matt Machuga: In this episode, Adam talks with Ryan Tablada and Matt Machuga about the philosophical differences between programming in a statically typed language vs. a dynamically typed language. They talk about things like explicit interfaces vs. duck typing, functi by Full Stack Radio
70 min listen
17: Adam Culp - Maximizing Your Conference Experience: In this episode, Adam talks to Adam Culp, organizer of Sunshine PHP and ZendCon. They talk about how to get into conference speaking, how to make the most of a conference as an attendee, as well as tips for running a great local user group. This episode by Full Stack Radio
46 min listen
7: Shawn McCool - BDD and DDD: In this episode, Adam talks with Shawn McCool about Behavior Driven Development and Domain Driven Design. They talk about how you can use these ideas to better understand your clients' needs and to build software that closely models their business. They a by Full Stack Radio
61 min listen
19: Dave Marshall - Designing Effective Tests: In this episode, Adam talks to Dave Marshall, testing guru and host of That Podcast. Dave talks to Adam about the upcoming Mockery 1.0 release and some interesting API changes destined for 2.0. They also talk about how fakes can improve your tests, fixtur by Full Stack Radio
70 min listen
2: Eric Barnes - Wardrobe, Javascript and Writing: In this episode, Adam talks with Eric Barnes of Userscape about rebuilding WardrobeCMS, trends in Javascript development, and building an audience. by Full Stack Radio
40 min listen
12: Jack McDade - Building Photoshoot.io and Getting Stuff Done: In this episode, Adam talks to Jack McDade creator of Statamic, about building his latest project Photoshoot.io. They also talk about how Jack juggles design and development, and how to buckle down and get things done. This episode is brought to you by H by Full Stack Radio
49 min listen
20: Ian Landsman - Code is not a business: In this episode, Adam talks to Ian Landsman, founder of Userscape and creator of HelpSpot. Ian talks about the biggest mistakes programmers make when trying to start their own business, where to find new ideas, and why your new software product shouldn't by Full Stack Radio
71 min listen
44: Joel Clermont - What the heck is Elm?: In this episode, Adam talks to Joel Clermont about the Elm programming language and getting started with functional programming. by Full Stack Radio
54 min listen
14: Taylor Otwell - Building Envoyer, Laravel 5.1 and Learning to Program: In this episode, Adam talks to Taylor Otwell, creator of Laravel. Taylor gives an in-depth behind-the-scenes look at how Envoyer is architected, and shares some new tips and tricks he's been using to keep his code simple. They also talk about the decision by Full Stack Radio
61 min listen
13: Phil Sturgeon - Designing and Testing APIs, Go and PHP 7: In this episode, Adam talks to Philip J. Sturgeon about designing and testing APIs at Ride. They also talk about building microservices with Go, and some of the new features coming in PHP 7. This episode is brought to you by Hired. by Full Stack Radio
75 min listen
16: Kent Beck - Tiny Decisions and Emergent Design: In this episode, Adam talks to Kent Beck about Smalltalk vs. Java, low level design vs. big picture architecture, planning for the future vs. emergent design, and applying the principles of Extreme Programming in 2015. This episode is brought to you by H by Full Stack Radio
46 min listen
4: Alex Bilbie - OAuth 2 and API Security: In this episode, Adam gets super technical with Alex Bilbie about the OAuth 2 specification. They talk about the different grant types and what they're each appropriate for, as well as discuss some potential API security strategies for one of Adam's perso by Full Stack Radio
56 min listen
34: Matt Machuga - Dealing with Dependencies in Active Record Models: In this episode, Matt Machuga of Think Through Math returns to talk with Adam about design options when you find yourself wanting access to a collaborator in an Active Record or Eloquent model. They discuss the pros and cons of four specific designs, and by Full Stack Radio
39 min listen
15: Everzet - Classicist and Mockist TDD: In this episode, Adam talks to Konstantin Kudryashov, creator of Behat and BDD Practice Manager at Inviqa. Konstantin and Adam talk about the schools of TDD, how to use test doubles effectively, and common challenges people face when trying to learn TDD. by Full Stack Radio
57 min listen
30: Evan You - Diving Deep into Vue.js: In this episode, Adam talks to Evan You, the creator of Vue.js. Evan talks about his time at Google Creative Lab and the sort of work that inspired him to create Vue. He also explains in depth how data binding works in Vue, and how it's different and more by Full Stack Radio
37 min listen
47: Sara Soueidan - Ditching Icon Fonts for SVG: In this episode, Adam talks to Sara Soueidan about the benefits of using SVG over icon fonts, and the best workflow for using SVG in your projects. by Full Stack Radio
45 min listen
31: Woody Zuill - #NoEstimates: In this episode Adam talks to Woody Zuill about software project estimation. They talk about the #NoEstimates hash tag, and what it means and where it came from. They also talk about ways to manage software projects without worrying about estimation, and by Full Stack Radio
46 min listen
3: Matt Machuga - Ruby, PHP, object oriented design, testing and other crap: In this episode, Adam talks with Matt Machuga of Think Through Math about being a Rubyist who still writes PHP and the differences between writing PHP like a Rubyist vs. writing PHP like a Java developer. They also talk about common struggles when learnin by Full Stack Radio
62 min listen
22: Corey Haines - The 4 Rules of Simple Design: In this episode, Adam talks to Corey Haines, author of "Understanding the 4 Rules of Simple Design". They talk about the importance of low-level design decisions, tricks for naming things well, why you shouldn't model your objects after the real world, an by Full Stack Radio
65 min listen
18: Katie Cerar - Designing and Prototyping for Clients: In this episode, Adam talks to Katie Cerar, user experience designer at Boltmade. Katie talks to Adam about running a successful kick off meeting, understanding the problems your client is trying to solve, and strategies for getting clients to keep their by Full Stack Radio
40 min listen
27: Ben Orenstein - Outside-in TDD and Dependency Injection in Rails: In this episode, Adam talks to Ben Orenstein of thoughtbot about useful tips for writing the first few tests in your application and working your way down to the unit level by starting with acceptance tests. They also talk about why dependency injection h by Full Stack Radio
36 min listen

More Episodes from Full Stack Radio

Skip carousel

152: Ben Orenstein - How to Stand Out When Applying for a Job at a Small Company: In this episode Adam talks to Ben Orenstein about what you can do to stand out if you’re trying to get a job at a small company. by Full Stack Radio
48 min listen
151: DHH – Building HEY with Hotwire: In this episode Adam talks to DHH about using Hotwire to develop Basecamp's new email service HEY while shipping only 40kb of JavaScript to the client. by Full Stack Radio
74 min listen
150: Secret Screencasting Tips & Behind the Scenes of Tailwind CSS 2.0: In this episode, Adam and Jack talk about all the secret tips you need to know to screencast like a pro. Then they go deep into some of the things Adam is working on for Tailwind CSS 2.0, like the new default config file. by Full Stack Radio
59 min listen
149: Choosing a Payment Processor, Radical Icons & W3C Hype: Adam and Jack discuss how it sucks when you're forced to change billing platforms, and embark upon a deep dive on the merits of Adam's favorite solutions. We also talk about Jack's recent Radical Icon launch and promotional strategy regrets, which thankfu by Full Stack Radio
57 min listen
148: Accessible Focus Styles, Tailwind Labs on YouTube, and Secret Projects: Adam and Jack talk about accessible focus styles, Headless UI, the new Tailwind Labs YouTube channel, Tailwind presets, and the progress on the great Statamic Bug-Fix-a-Thon of 2020. They also kick around what "Tailwind Lite" could be and where it might l by Full Stack Radio
60 min listen
147: Surviving GitHub Issues, the Statamic 3 Launch Aftermath, Tailwind 1.8, and Headless UI: Adam and Jack talk about strategies for keeping up with GitHub issues and coping with customer criticism, and how life is going after the Statamic 3 launch. They also talk about the new features in Tailwind 1.8, and work through some branding problems for by Full Stack Radio
80 min listen
146: Launching Statamic 3, GitHub Sponsors, Tailwind CSS v1.7, and Preparing for Laracon: Adam and Jack talk about how the Statamic 3 launch went, and adding GitHub Sponsor tiers to the Statamic GitHub organization and what to give people in exchange for sponsoring. They also talk about the new Tailwind CSS v1.7 release, and the new features l by Full Stack Radio
81 min listen
145: Statamic 3.0 and Tailwind CSS 2.0: Jack McDade joins Adam to talk about what he's been up to building up to the Statamic 3.0 launch (it's out now!) and Adam shares a bunch of ideas he's been working on for Tailwind CSS v2.0. by Full Stack Radio
76 min listen
144: Gary Bernhardt - TypeScript and Testing: In this episode, Adam talks to Gary Bernhardt about building Execute Program, why he chose to build it as a full-stack TypeScript application, and the implications using TypeScript has on what you need to test. by Full Stack Radio
85 min listen
143: Rich Harris - Svelte and Defending the Modern Web: In this episode, Adam talks to Rich Harris about Svelte, and why we should keep pushing forward with the modern web even if it's not perfect yet. by Full Stack Radio
76 min listen
142: Jason Cohen - Learning to Hire and Manage a Team: In this episode, Adam talks to Jason Cohen of WP Engine about hiring people to join the Tailwind team, figuring out what to focus on, and learning how to manage. by Full Stack Radio
55 min listen
141: Jason Fried - Running the Tailwind Business on Basecamp: In this episode, Adam talks to Jason Fried about growing the Tailwind team and how to best use Basecamp to keep his particular company organized. He also walks through tons of real examples from their recent work on HEY, sharing lots of behind-the-scenes stuff about how Basecamp use Basecamp themselves. by Full Stack Radio
67 min listen
140: Evan You - Reimagining the Modern Dev Server with Vite: In this episode, Adam is talks to Evan You about Vite, a new dev server and build tool for modern JavaScript projects. by Full Stack Radio
48 min listen
139: Alex DeBrie - DynamoDB for Relational Database Diehards: In this episode, Adam is talks to Alex DeBrie about DynamoDB, and how it compares to relational databases like MySQL. by Full Stack Radio
59 min listen
138: Tom Preston-Werner - Building Full-Stack JS Apps with Redwood.js: In this episode, Adam is talks to Tom Preston-Werner about Redwood.js, a new full-stack JavaScript framework for building edge-ready web applications. by Full Stack Radio
73 min listen
137: Tim Neutkens - Continuing to Innovate with Next.js 9.3: In this episode, Adam is talks to Tim Neutkens about what's new in Next.js 9.3 and how it's changing the way applications are built at ZEIT. by Full Stack Radio
83 min listen
136: Michael Chan - React Is Not a Rails Competitor: In this episode, Adam is joined by Michael Chan to talk about how people who identify as React developers are building real web applications, and why it seems like nobody is talking about databases or background jobs anymore. by Full Stack Radio
68 min listen
135: Lessons Learned Building Tailwind UI: In this episode, Adam is joined by Sam Selikoff to talk about some of the interesting technical challenges he faced building Tailwind UI, and how working on the project has influenced how he will build layouts in the future. by Full Stack Radio
98 min listen
134: Mark Dalgleish - You Should Be Using Layout Components: In this episode, Adam talks to Mark Dalgleish about common mistakes people make in their approach to constructing layouts, and how dedicated layout components can make your component system much easier to work with. by Full Stack Radio
57 min listen
133: Sam Selikoff - Building Production-Ready SPAs Fast with Mirage.js: In this episode, Adam talks to Sam Selikoff about Mirage.js and how to use it to build production-ready front-end applications, even if your back-end API isn't ready yet. by Full Stack Radio
63 min listen
132: Caleb Porzio - Just Enough JavaScript with Alpine.js: In this episode, Adam talks to Caleb Porzio about his new UI library Alpine.js. by Full Stack Radio
86 min listen
131: Ryan Singer - How Basecamp Builds Software: In this episode, Adam talks to Ryan Singer of Basecamp about how they plan, structure, and execute on new features. by Full Stack Radio
73 min listen
130: David Khourshid - Building Better UI Components with State Machines: In this episode, Adam talks to David Khourshid about using state machines to build UI components that are simpler and more resilient to bugs. by Full Stack Radio
54 min listen
129: Evan You - What's Coming in Vue.js 3.0: In this episode, Adam talks to Evan You about all of the changes and improvements coming to Vue.js 3.0. by Full Stack Radio
78 min listen
128: Alasdair Monk - Scaling CSS at Heroku with Utility Classes: In this episode, Adam talks to Alasdair Monk about how they approach CSS at Heroku, and how using a utility-based approach has kept their team happy for the last three years. by Full Stack Radio
61 min listen
127: Jonathan Reinink - Building Modern Monoliths with Inertia.js: In this episode, Adam talks to Jonathan Reinink about Inertia.js, a new framework he recently released that lets you build single page applications with Vue, React, or Svelte, without having to give up the productivity benefits of traditional server-side by Full Stack Radio
96 min listen
126: James Long - Building Distributed Local-First JavaScript Applications: In this episode, Adam talks to James Long (creator of Prettier) about building Actual, a local-first Electron application with no central database that syncs data peer-to-peer. by Full Stack Radio
61 min listen
125: Rob Walling - Choosing the Right Product Idea: In this episode, Adam talks to Rob Walling about choosing, validating, and marketing a viable software product. by Full Stack Radio
55 min listen
124: Leslie Cohn-Wein & Rafael Conde - Designing the User Interface at Netlify: In this episode, Adam talks to Leslie Cohn-Wein and Rafael Conde about designing and implementing new UI features at Netlify. by Full Stack Radio
56 min listen
123: Ian Landsman - Marketing and Positioning a New Tailwind CSS Product: In this episode, Adam gets some advice from Ian Landsman of Userscape on marketing and positioning a new Tailwind CSS components directory project he's working on with Steve Schoger. by Full Stack Radio
66 min listen

Related podcast episodes

Skip carousel

Unveiling Adobe's Firefly 2: A Look at AI-Driven Features by The Mark Cuban Podcast
9 min listen
20: Hygiene for a computing pandemic by FOSS and Crafts
20 min listen
SBOM Opinions, Phosphorus, CISA Tools, Beyond Identity, & CyberSec Word Games - ESW #262: This week in the Enterprise News: eSentire raises $325M as it expands into services Beyond Identity raises $100M to build out MFA, Secureframe raises $56M to help folks with SOC 2 and HIPAA compliance, Nashville-based Phosphorus Cybersecurity raises... by Security Weekly Podcast Network (Video)
51 min listen
SBOM Opinions, Phosphorus, CISA Tools, Beyond Identity, & CyberSec Word Games - ESW #262: This week in the Enterprise News: eSentire raises $325M as it expands into services Beyond Identity raises $100M to build out MFA, Secureframe raises $56M to help folks with SOC 2 and HIPAA compliance, Nashville-based Phosphorus Cybersecurity raises... by Enterprise Security Weekly (Video)
51 min listen
EP136 Next 2023 Special: Building AI-powered Security Tools - How We Do It?: Guest: , VP of Engineering, Google Cloud Security Topics: , what is the most exciting part for you? We care both about and using AI for security. How do you organize your thinking about it? Executive surveys imply that trusting... by Cloud Security Podcast by Google
22 min listen
How layer-2s are trying to transform Bitcoin's culture: The Scoop: Muneeb Ali by The Scoop
39 min listen
Episode 94: Copilot for Security by The Azure Security Podcast
36 min listen
Real Talk: Future of Living - Unlocking the Future of Co-Living: Access Control Innovations and PropTech Insights by The Co-Liv Podcast
17 min listen
Crazy money and crazy outcomes - cybersecurity acquisitions in all shapes and sizes - ESW #358: This week, Adrian and Tyler discuss some crazy rumors - is it really possible that a cloud security startup valued at over $8 billion in November 2021 just got bought for $200 million??? Some healthy funding for Cyera and Cohesity ($300m and $150m,... by Enterprise Security Weekly (Video)
66 min listen
Crazy money and crazy outcomes - cybersecurity acquisitions in all shapes and sizes - ESW #358: This week, Adrian and Tyler discuss some crazy rumors - is it really possible that a cloud security startup valued at over $8 billion in November 2021 just got bought for $200 million??? Some healthy funding for Cyera and Cohesity ($300m and $150m,... by Security Weekly Podcast Network (Video)
66 min listen
Crypto Stories: Aleksandr Bulkin on ADAPT, "Initial Witness Offerings" and Crypto Disruption: Aleksandr Bulkin (@coinfund_al), co-founder of CoinFund and creator of ADAPT (adaptk.it) joins Erik on this episode to discuss: - How Alex got involved in crypto and why the Ethereum white paper and Augur white paper contributed so much to his... by Village Global Podcast
53 min listen
Day Zero: Moshe Zioni, VP of security research at Apiiro has been researching security for over 20 years in multiple industries. In this episode of Cybersecurity Unplugged, Zioni discusses the downstream dependencies on other open source programs that are... by Cybersecurity Unplugged
36 min listen
Amrit Kumar & Dr.Ilya Sergey: Scilla – A Formal Verification Oriented Contract Language: We are joined by Dr. Amrit Kumar and Dr. Ilya Sergey to discuss Scilla, the smart contract language of the upcoming Zilliqa blockchain. In a previous episode, we've already covered the vision and technical approach of Zilliqa to solve the transaction scalability problem of permissionless blockchains. This episode focuses specifically on their smart contract language development efforts. by Epicenter - Learn about Crypto, Blockchain, Ethereum, Bitcoin and Distributed Technologies
72 min listen
Hashing It Out #44 - Blockstream - Russell O'Connor: We bring you another brilliant mind on the show for this episode! Russell O'Connor, developer of Blockstream's Simplicity programming language for Bitcoin, dives deep into formal verification topics. We learn about the language design principles driving Simplicity, how formal verification plays an integral role in making the language suitable for securely automating Bitcoin transactions, and the challenges in creating a smart contract script for Bitcoin. We get a glimpse into the future of blockchain automation, and he elucidates what is being done right and what could be done better in blockchain platforms to place security first in smart contract design. by Logos Podcast with Jarrad Hope
72 min listen
Screwing Up the Messaging and Also the RSA Dates by AWS Morning Brief
5 min listen
The Layer One Data Availabilty and Consensus Solution: LazyLedger is a scalable general-purpose data availability layer for decentralized apps and trust-minimized sidechains. Co-Founders Ismail Khoffi and Mustafa Al-Bassam gave us a deep technical overview and vision of the project. by Epicenter - Learn about Crypto, Blockchain, Ethereum, Bitcoin and Distributed Technologies
77 min listen
Red light, Green light; AI and Security with William De’Ath of GBC.AI: The ‘Clipy’ of Crypto, Blockchain security, comics for blockchain, bridges and more. by The Charlie Shrem Show
39 min listen
Making Service Meshes Work for People - Idit Levine - ASW #267: Service meshes create the opportunity to make security a team sport. They can improve observability and service identity. Turning monoliths into micro services sounds appealing, but maybe not every monolith needs to be broken up. We'll also talk about... by Security Weekly Podcast Network (Audio)
78 min listen
Dalle-3 Pre-Prompt Text Leaked by AI Chat: ChatGPT & AI News, Artificial Intelligence, OpenAI, Machine Learning
19 min listen
Brett Kelsey-VP at McAfee talks autonomous vehicles, the talent gap, and future security solutions: Brett Kelsey, VP and Chief Technology Strategist … by HACKED: Into the minds of Cybersecurity leaders
43 min listen
A "Blessing" of Unicorns - ESW #262: This week, in our first segment, we welcome Jimmy Vo, Detection Engineer at Datadog for an interview on Detection Engineering in the Age of Cloud! Then, Brian Peterson, ICS4ICS Program Manager, ISAGCA Advocacy Program Manager, and LOGIIC Program... by Security Weekly Podcast Network (Audio)
104 min listen
Vulcan Mind Meld - PSW #692: This week, Fleming Shi, CTO of Barracuda Networks, joins us for an interview to talk about Protecting the Hybrid Workforce! Then, Fred Gordy, Director of Cybersecurity at Intelligent Buildings, joins us for a discussion on Smart Building Control... by Security Weekly Podcast Network (Audio)
205 min listen
How to hack iOS - Part 1: Wes Widner joins me to discuss how to hack iOS. by Exploring Information Security - Exploring Information Security
27 min listen
Google's Bard Unveils Breakthrough: Coding Apps via Image Screenshots by The Mark Cuban Podcast
11 min listen
S4, E173 - Alex Bovee, CEO & Co-Founder at ConductorOne by Privacy Please
56 min listen
Illuminating Creativity: A Dive into Adobe's Firefly 2 and Upcoming AI Enhancements by Practical AI
9 min listen
Llama2 Overtakes ChatGPT, The AI Cartel & Addictive AI Agents | E25 by This Day in AI Podcast
67 min listen
Dunking on Robots For InfoSec Clout by AWS Morning Brief
4 min listen
API Security: All links and images for this episode can be found on CISO Series () APIs are gateways in and out of our kingdom and thus they're also great access points for malicious hackers. How the heck do we secure them without overwhelming ourselves? Check out ... by Defense in Depth
23 min listen
S1E37 - AI Did Not Write This Podcast by Current Account with Clay Lowery
17 min listen

Discover this podcast and so much more

4: Alex Bilbie - OAuth 2 and API Security

4: Alex Bilbie - OAuth 2 and API Security

Description

Titles in the series (100)

More Episodes from Full Stack Radio

Related podcast episodes