Financial Grade APIs Using OAuth and OpenID Connect

A talk given by Travis Spencer from Curity at the 2019 Austin API Summit in Austin, Texas.

Financial grade level of security is important not only for the financial sector. This level of security is also necessary for other industries, such as, healthcare, insurance, energy and government.
In this talk we’ll look at what financial grade APIs are, why it’s important, what’s different and how OAuth and OpenID Connect can be used in this context.
Examples of things that make the use of OAuth financial grade include:
- Pseudonymous identifiers (PPID)
- Signed requests (to protects against “Man in the browser”)
- Certificate-constrained tokens

• Category

  How-to & Style