oauth

2 articles

• From API Keys to Scoped Tokens: Upgrading a Public API's Auth Without Breaking Clients

  Migrate a public API from all-powerful API keys to scoped, expiring tokens: design the scopes, run both systems in parallel, and deprecate keys without breaking clients.

  • api-security
  • authentication
  • oauth
  • migration
  • api-design
  Migration guide

  APIs & platforms
  

• OAuth 2.0 with PKCE, Step by Step: The Flow Your SPA Actually Runs

  Walk the authorization code flow with PKCE exactly as a browser app runs it, including the verifier math, state checks, and token storage decisions.

  • oauth
  • pkce
  • authentication
  • spa
  • security
  Tutorial

  APIs & platforms