Posts by Tom Abbott
Stormpath and Nginx – OAuth 2.0 at the Gateway
At Stormpath, we care – a lot – about the craft of API development. We want to help developers focus on building robust, intuitive and scalable APIs, and let go of the worry and hassle of authenticating those services. Stormpath has long supported Token Authentication and API key management, so developers can offload API access …
New! SAML Support for Your Customer Apps
Integrate with Popular SAML Identity Providers in Minutes. Today we launched support for the SAML standard for authentication and user management. Applications that use Stormpath for user management will now be able to use popular identity providers (IdPs) for Single Sign-On (SSO) capability. In other words, Stormpath-backed apps are now SAML service providers that work …
Where to Store your JWTs – Cookies vs HTML5 Web Storage
Update 5/12/2016: Building a Java application? JJWT is a Java library providing end-to-end JWT creation and verification, developed by our very own Les Hazlewood. Forever free and open-source (Apache License, Version 2.0), JJWT is simple to use and understand. It was designed with a builder-focused fluent interface hiding most of its complexity. We’d love to have …
The Easy Way To Manage Your OAuth 2.0 Access Tokens
At Stormpath, we spend a lot of time designing features to help developers build applications using best practices for authentication, authorization, and user data security. Now, Stormpath makes it easy for developers to generate OAuth 2.0 access tokens. This new feature gives your applications a way to authorize requests for other applications and micro-services that …
Easy Single Sign-On
Update 5/12/2016: Building single sign-on for user management? Learn how to integrate OAuth with our OZorkAuth game! Since the beginning of time, developers have been writing code to store and handle user accounts. Then Stormpath came out and made that process a lot simpler. Instead of writing all that code yourself, you just make a …
Use JWT The Right Way!
Update 5/11/2016: You can now inspect JWTs directly from your Chrome browser with JWTinspector.io! Also, check out the latest on JWTs + Stormpath in our product documentation, get the full rundown on token authentication in our guide to tokens and scalable user management, and don’t forget our very own JJWT tool for creating and verifying tokens. JSON Web …
Choosing your Node.js Authentication Strategy
Update 5/11/2016: Developing in Node.js? Check out some of our Greatest Hits: A 15-Minute App Tutorial for AngularJS + Node.js + Stormpath, Everything you ever wanted to know about sessions in Node but were afraid to ask, and A Simple Web App with Node.js, Express, Bootstrap, and Stormpath. Also, don’t miss nJWT, the cleanest JSON Web Token …