Tag: security
All the articles with the tag "security".
Frontend Security: JavaScript Obfuscation, Request Encryption, and Signing to Make Scraping Harder
Introduces JavaScript obfuscation, request-body encryption, and request signing through examples, including RSA key exchange, AES-GCM encryption and decryption, and backend timestamp and nonce validation. It discusses increasing the cost of API analysis and reverse engineering, and balancing security with performance.
Implementing the OAuth 2.0 Authorization Code Flow
A custom OAuth 2.0 authorization code implementation using RESTEasy, JPA, CDI, and JWT connects user consent, code generation, callbacks, and token exchange. The article shows signature and permission checks on the resource server, along with the project structure, deployment steps, and complete example code.