Static API tokens have long been used to call external APIs and access the resources of third parties such as software vendors. As API standards have evolved, OAuth 2.0 emerged as the option offering more robust security, greater flexibility, and a better developer experience. Let's explore the advantages of moving…
Read moreThe Web Authentication (WebAuthn) specification, given official approval by the World Wide Web Consortium (W3C) and the FIDO Alliance in 2019, aims to strengthen online security by allowing users to sign in to sites with elements like biometrics and FIDO security keys. The WebAuthn API can replace or supplement less-secure…
Read moreFor large enterprise companies, boundaries around each team are crucial for maintaining systems that are owned by software engineers. This is accomplished by allowing individual teams to own their systems and expose them via APIs.
Read moreElasticsearch is a search engine that can be integrated into any of your tech stacks using its REST APIs and its wide selection of libraries.
Read moreWhen defining classes for a simple aggregation of values, Java developers have traditionally relied on constructors, accessors, equals(), hashCode() and toString(), an error-prone practice that has low value and shifts the focus away from modeling immutable data. Java records were introduced as a first preview in JDK 14 in order…
Read more
Xinxin Zhu 6 min read
Apache APISIX is a dynamic, real-time, high-performance API gateway, providing rich traffic management. The project offers load balancing, dynamic upstream, canary release, circuit breaking, authentication, observability, and many useful plugins. In addition, the gateway supports dynamic plugin changes along with hot-plugging. The OpenID Connect plugin for Apache APISIX allows users…
Read moreIn this tutorial we are going down a different track then our last Ruby Post (bad pun intended). Instead diving into building a very simple API that, of course, we will secure with access tokens minted by our very own Okta OAuth server. We'll make requests to this API via…
Read moreA customer once asked me: "Hey – Can Okta integrate with Kong?" Spoiler alert: You totally can integrate Kong with Okta using its OpenID Connect plugin.
Read more
Karson Kwan 7 min read
Rockstar chrome extension is a third-party, Non-Okta Application (as defined in Okta's Master Subscription Agreement). Okta is not involved in making this chrome extension available, and we have neither oversight nor input into its security features and functionality. For questions regarding this, or any other, Non-Okta Application(s) your organization uses…
Read moreFastify is just as the name implies, fast. Not just in terms of development speed—its low overhead means the server is fast as well. When writing APIs, speed on both sides is paramount. Fastify is a web framework for Node.js that was designed for efficiency. Fastify is fully extensible with…
Read more
Nick Gamb 4 min read
My name is Nick Gamb and I am excited to be joining the Okta Developer Advocacy team for the .NET community.
Read moreOkta is an identity platform focused on making authentication easy to build with minimal code, and you'll often hear us say that by using Okta you'll never have to build authentication again.
Read moreKoa is a web framework from the makers of Express. Koa is designed to be middleware-driven and extremely lightweight. It is so lightweight that it comes without any middleware on its own. But not to fear, there are plenty of packages available for basic functionality such as routing, authentication, body…
Read moreDid you make any resolutions this year? One resolution I seem to make every year is to lose weight and exercise. Sometimes I even stick to it.
Read more
David Neal 3 min read
The World-Wide Web, as we know it, started around 1993 by serving static HTML files with links to other HTML files. It didn't take long for developers to find ways of making websites more "dynamic" using technologies like Common Gateway Interface (CGI), Perl, and Python.
Read moreREST APIs are a big part of today's Internet. Some of the everyday use cases of REST APIs are:
Read moreDeveloping services in Java, including REST APIs, wasn't always easy or productive until Spring came along and changed the landscape. Many years have passed since then, and new frameworks have emerged in the community.
Read moreEver since JavaScript made its giant leap from frontend to backend more than 10 years ago, Express has been the go-to library for writing server-side javascript and virtually synonymous with Node.js. It was (and in many aspects it still is) a modern and simple approach backend APIs. Declarative tree-like structure…
Read moreIf you're a web developer, chances are you have heard the term "JAMstack." Curiously, JAMstack isn't a solution to prevent clogged printers, something to eat on toast, or a way to make music. However, by the time you finish reading this tutorial, you'll understand JAMstack and its benefits, and learn…
Read moreAs a software developer, it's your job to know your customers and their use cases well enough to create an elegant and functional solution. This understanding will help you succeed and ultimately enjoy watching them love and use your applications.
Read moreThere are so many options when it comes to building out a simple CRUD (Create, Read, Update, Delete) app. The most refreshing data access layer to work with recently by far has been GraphQL. It's great because the developer can use a simple, strongly typed language to define models and…
Read more
Braden Kelley 8 min read
JavaScript has been turning into more and more of a robust language and is no longer just seen in browsers. Server-side JavaScript has become quite relevant. However, one major thing that JavaScript is not, is a strongly typed language. Being explicit with what types to expect from function parameters or…
Read more"There is no Frigate like a Book To take us Lands away..." – Emily Dickinson
Read moreASP.NET Core is entirely open source, free, has built-in DI and logging, works smoothly with a fantastic ORM and has tons of built-in features within Web API framework, and on top of that you get Microsoft support for free, maturity and flexibility of C# and ASP.NET, it's evident that ASP.NET…
Read moreIf you haven't heard of PostgreSQL (often called Postgres), today's your lucky day. It's a robust, open source relational database that powers some of the world's largest applications. In this post, I'll show you how to create a REST API in Node that uses Postgres as a data store. I'll…
Read more
Micah Silverman 3 min read
My name is Micah Silverman and I just joined the Developer Advocacy team at Okta. TL;DR - There are some easter eggs in this post. If you want to know what they're all about - jump to the bottom.
Read moreIt's pretty common for mobile apps to access backend API services to fetch data. It's also pretty common for APIs to require secret keys in order to access them. So how do you securely include API keys in a mobile app? Well, the short answer is you don't. The long…
Read moreGraphQL has become an immensely popular alternative to REST APIs. The flexibility you get from using GraphQL makes it easier for developers to get any information they need for an app, and just the information they need for that portion of the app. That gives you the feel of a…
Read moreIf you're building or managing an API, you're probably using an API gateway to help you manage it. Hopefully, you're also using OAuth and an identity provider (IdP) like Okta to secure your API through the gateway. Maybe you've also discovered that getting the "OAuth dance" working properly among the…
Read moreSo, you're building a custom app and you need to include support for multi-factor authentication (MFA). Did you know that Okta's API can support multi-step MFA workflows?
Read moreIt's that time of year again: Christmas music on the radio, festive decorations in the workplace, and a chill in the air. Except in the Southern Hemisphere, where it's warm and balmy. And on the International Space Station, where the temperature is strictly regulated. But I digress.
Read moreNOTE: The video and code in this post has just been updated for 2021!
Read more
Karl McGuinness 1 min read
It seems that OAuth 2.0 is everywhere these days. Whether you are building a hot new single page web application (SPA), a native mobile experience, or just trying to integrate with the API economy, you can't go far without running into the popular authorization framework for REST/APIs and social authentication.
Read more
Alisa Duncan 
John Gramila 
James Hickey 
Shahed Nasser 
Jimena Garbarino 
Andrew Van Beek 
Nickolas Fisher 
Heather Wallander 
Krasimir Hristozov 
Daniel Pereira 
Ivo Katunaric 
Laura Rodríguez 
Ibrahim Šuta 
Aaron Parecki 
Tom Smith 
Nate Barbettini