New answers tagged

2

I'been digging in the Certificate field recently, and I know it's been a month since you asked, but I hope this helps you some way. In order to give each of your customers a certificate, You'll basically need a server with its own selfsigned Certificate. This server will "give" your customers their new Certificate. The flow would be something like this: 1) ...


0

Axiomatics provides an authorization policy lifecycle that will help you formulate your ABAC policy. Define the use case Define the use case’s authorization requirements in natural language statements Identify the attributes that are used in the natural language statements Identify where the attributes comes from Rework the natural language statements as ...


0

The token that you are speaking about is not generated in the mobile app. It is generated in the 3rd-party authentication servers and passed to your mobile app. Your mobile app has to pass it back to the servers to validate your apps's authorization. Regarding security of the token, assuming that you are using SSL, you can pass the token in either a query ...


0

I have been working on a similar case. I implemented OAuth2 following RFC-6749 As I wanted to have an Authorization Microservice, this one would only handle Auth-related operation and works for outside and inside the network. The APIs in this service are generic enough to handle all needed for OAuth2. I recomend you to follow the flow in the section "1.2. ...



Top 50 recent answers are included