Skip to content
Hallway
0:00 / 0:00

#oauth2.0#xss#spa

alert‘OAuth 2 0’; // The impact of XSS on OAuth 2 0 in SPAs

Philippe De Ryck

219 subscribers • 1 video on Hallway

YouTube
  • Recommended by 2 people: 2 in engineering communities.
  • Presented by Philippe De Ryck

Intermediate. Assumes working knowledge.

9.9K views5 years ago2 recommendations

SecurityWeb developmentWeb and application securityExploits and vulnerabilitiesHTTP, REST and GraphQL

Philippe De Ryck explains the security risks of storing OAuth tokens in single-page applications and introduces the BFF pattern.

In this webinar, we take an honest look at the dangers of XSS in SPAs. We discuss the impact on OAuth 2.0 along with current security best practices. More information: pragmaticwebsecurity.com/talks/xssoauth.html

Why it's here

2 people recommend this

What people say. Recommended as an essential explanation of why browser-stored tokens are vulnerable and how the BFF pattern helps.

Moments people linked to

u/TNest2in r/dotnet • Recommends

On “Are Cookies getting ditched in favor of JWT?”

Here's a good video why you never should use tokens in your browser and it introduces the BFF pattern alert‘OAuth 2 0’; // The impact of XSS on OAuth 2 0 in SPAs [video
2View on Reddit

u/Spirchin r/dotnet • Recommends

On “about the new auth in .net 8”

application scope = client side SPA the two major reference i can give are these two videos (these are what started me to look into BFF solution for SPA) [video [video (this one turn into an ads midway but the basis is still good)
1View on Reddit