New answers tagged authorization
1
vote
JWT forgery by an internal attacker
Network segmentation for the HSM is a good measure.
Principle of Least Privilege for who can authenticate to the HSM as well.
Top 50 recent answers are included
Related Tags
authorization × 430authentication × 199
oauth × 68
oauth2 × 47
web-application × 42
jwt × 35
access-control × 33
openid-connect × 26
api × 25
rest × 18
rbac × 18
encryption × 17
tls × 16
passwords × 14
certificates × 13
csrf × 13
http × 12
identity × 11
token × 11
network × 10
mobile × 10
session-management × 10
web-service × 10
windows × 9
android × 9