What the @#!? is Auth
from Authress (Switzerland)
About speaker
CTO and Security Specialist @ Authress
Warren focuses on technology that helps teams automate security implementations. He has journeyed through many different locations, technologies, and industries from Health Care IT in Wisconsin to E-Commerce in Switzerland.
About speakers company
Authress provides the complete authentication and authorization solution to easily drop into the software you're building. It enables login integration, fine grained control over permissions, api keys as a service, secure identities, and everything else to solve identity for your application control plane. We've been building Authress for over 6 years in Switzerland, and have a very dedicated team focused on security and convenience.
Abstracts
Authentication remains a complicated yet critical aspect of application security. In this talk, I'll demystify the core concepts, diving into access tokens, refresh tokens, and browser security mechanisms like WebAuthn for hardware-based authentication.
Additionally, I'll explore techniques such as session handling, revocation strategies, silent authentication for improved security UX, and the usage scopes for controlling access granularity, and common pitfalls associated with each.
Finally, I'll delve into JSON Web Tokens (JWTs), the use of EdDSA signatures for enhanced security and performance, as well as the common pitfalls that seasoned pro and newcomer alike struggle with when it comes to auth. Here I hope to equip everyone with some additional knowledge to navigate its complexities and build secure, user-friendly systems.
The talk was accepted to the conference program
other talks of this topic
Alexandre Gallice
Red Hat
Federico Fregosi
OpsGuru
Siddhant Agarwal
Neo4j
Katharina Fetzer
hylane GmbH
Vadzim Prudnikau
Trainitek
Fabien Vauchelles
Scrapoxy
Opemipo Disu
Latitude
Shelly Goldblit
Dell Technologies
Vadzim Prudnikau
Trainitek
Pradeep Sharma
Independent
Mariia Bulycheva
Zalando
Lara Mossler
Airbnb
Sivan Biham
Healthy.io
Ambesh Singh
Visionet Systems Deutschland
Ambesh Singh
Visionet Systems Deutschland
Tech Internals Conf
is the largest conference for developers of complex
and highly loaded systems
Participation options
The price is soaring —> the closer the conference is, the more it costs.
what I`ll get?
- Participation in Q&A sessions
- Videos and slides after the conference
- Hearty coffee breaks and lunches
- Access to the exhibition area
- Afterparty with speakers and participants
Unlock up to 50%
off your ticket!
Enter your email to see your personalised discount — no commitment to purchase required
Changed your mind?
Please tell us why.
Thank you
for your reply!
Become partner
of the largest conference for developers of complex
and highly loaded systems