£37.54
  • RRP: £50.50
  • You Save: £12.96 (26%)
FREE Delivery in the UK.
In stock.
Dispatched from and sold by Amazon. Gift-wrap available.
Advanced API Security: Se... has been added to your Basket
Have one to sell?
Flip to back Flip to front
Listen Playing... Paused   You're listening to a sample of the Audible audio edition.
Learn more
See all 3 images

Advanced API Security: Securing APIs with OAuth 2.0, OpenID Connect, JWS, and JWE Paperback – 11 Aug 2014


See all 5 formats and editions Hide other formats and editions
Amazon Price
New from Used from
Kindle Edition
"Please retry"
Paperback
"Please retry"
£37.54
£37.54 £50.37
Promotion Message Amazon Students Members Get 10% Off 1 Promotion(s)

Note: This item is eligible for click and collect. Details
Pick up your parcel at a time and place that suits you.
  • Choose from over 13,000 locations across the UK
  • Prime members get unlimited deliveries at no additional cost
How to order to an Amazon Pickup Location?
  1. Find your preferred location and add it to your address book
  2. Dispatch to this address when you check out
Learn more
£37.54 FREE Delivery in the UK. In stock. Dispatched from and sold by Amazon. Gift-wrap available.
click to open popover

Special Offers and Product Promotions

  • Amazon Students Members Get an Extra 10% Off Selected Books Here's how (terms and conditions apply)

Frequently Bought Together

  • Advanced API Security: Securing APIs with OAuth 2.0, OpenID Connect, JWS, and JWE
  • +
  • Building Microservices
Total price: £63.53
Buy the selected items together

Enter your mobile number or email address below and we'll send you a link to download the free Kindle App. Then you can start reading Kindle books on your smartphone, tablet, or computer - no Kindle device required.

  • Apple
  • Android
  • Windows Phone

To get the free app, enter your mobile phone number.



Product details

Product Description

About the Author

Prabath Siriwardena is the Director of Security Architecture at WSO2 Inc., a company that produces a wide variety of open source software from data to screen. He is a member of OASIS Identity Metasystem Interoperability (IMI) TC,OASIS eXtensible Access Control Markup Language (XACML) TC, OASIS Security Services (SAML) TC, OASIS Identity in the Cloud TC and OASIS Cloud Authorization (CloudAuthZ) TC. Prabath is also a member of Apache Axis PMC and has spoken at numerous international conferences including OSCON, ApacheCon, WSO2Con, EIC, IDentity Next and OSDC. He has more than 9 years industry experience and has worked with many Fortune 100 companies.


What Other Items Do Customers Buy After Viewing This Item?

Customer Reviews

There are no customer reviews yet on Amazon.co.uk.
5 star
4 star
3 star
2 star
1 star

Most Helpful Customer Reviews on Amazon.com (beta)

Amazon.com: 4.6 out of 5 stars 7 reviews
18 of 18 people found the following review helpful
3.0 out of 5 stars I think the Author has the potential to provide more / better advanced theory. Possibly in the next release of the book? 11 Dec. 2014
By Paul Fowler - Published on Amazon.com
Format: Paperback Verified Purchase
I am not quite as enamored as other people are with the book. I wanted more current practice/theory and less discussion of legacy standards. I also somewhat felt that by the time Prabath discussed OpenID Connect, JWT, etc, he had gotten tired of writing and was becoming too cursory and too dependent on examples. I think the content would have been better if he had started with the current standards since his writing style showed more enthusiasm to teach/explain in the early chapters. In my opinion, there was too much basic Apache / Tomcat / WSO2 download and configuration and a little bit too much WSO2 sales.

I really wanted more current practical theory. For example, I ended the book without knowing the best theory for how to have non-repudiation in today's OAuth 2.0 / OpenID Connect world. I currently suspect one of 2-3 possibilities involving JWS or OAuth and MAC, etc, but really I didn't get any answers from the book. I only learned about attribute / properties potentially related to topics such as non-repudiation. That is just one example where the theory could have been more solid for the inquisitive mind.

Having said all that, it is obvious that Prabath knows his stuff. I am guessing he knows the answers to my questions. He knows the standards, without a doubt. There is value in the book. For instance, I would buy a whole book filled with the Pattern's and Practices of Chapter 14.
3 of 4 people found the following review helpful
5.0 out of 5 stars By a practitioner for practitioners... 11 Dec. 2014
By So cal - Published on Amazon.com
Format: Kindle Edition Verified Purchase
This work by Prabath is written by an expert practitioner for those who aspire to become expert practitioners. This begins by walking the reader through the use of some of the Twitter API. This simple yet practical exercise sets the tone for the text and provides a back drop for the rest of the book. Filled with hidden gems like a succinct explanation of perfect forward secrecy and historical facts that one would have to sift through volumes to discover. In this text Prabath does not waste alot of time with legacy technologies or administrative fluff. If you have a SOA, DOA, EDA, or API to which you want to add an extensible layer of protection using Internet Scale utilities then this book will give you a great start.
1 of 2 people found the following review helpful
5.0 out of 5 stars Indispensable Guidance for Real-world Implementations 28 Oct. 2014
By Dr. Paul Coleman - Published on Amazon.com
Format: Kindle Edition Verified Purchase
I comprehensive reference sure to benefit architects and coders alike. If you need more convincing that this is a must-have refrence book, have a browse through the author's blog entries at (blog.facilelogin.com), an excellent reference site on its own.
0 of 11 people found the following review helpful
5.0 out of 5 stars Five Stars 23 Sept. 2014
By nicestman - Published on Amazon.com
Format: Kindle Edition Verified Purchase
Great !
2 of 2 people found the following review helpful
4.0 out of 5 stars A surprisingly good book. Prabath really knows what he is writing ... 23 April 2015
By Jiri Jetmar - Published on Amazon.com
Format: Paperback
A surprisingly good book. Prabath really knows what he is writing about. He is not just explaining the standards like
OAuth, OpenID but he is also giving the reason why the standards are like they are, partially also from the historical
perspective. I do not found such a consideration in any of the available/similar book. To know such details is definitely
a benefit.

4 stars because of the Apache/Tomcat, etc. configurations. The paper in a book can be use better.

Cheers,
Jiri
Were these reviews helpful? Let us know


Feedback