Systems | Development | Analytics | API | Testing

Proof of possession for OAuth2 tokens(DPoP) with WSO2 Identity Server #Identityin15

In today's episode, we will discuss how you can secure OAuth2 Tokens with DPoP using the WSO2 Identity Server. DPoP (Demonstrating-Proof-of-Possession) is an additional security mechanism for the token generation which overcomes the issue of bearer token which will not validate between who is requested token and who is actually using the token for the access of a particular resource. The following is the outline for today's session.

Audit Logging for Micro-Integrator

When you are running a micro-integrator on a microservices environment, administrators who have admin access to the micro-integrator are able to change its configurations via admin services API. When someone needs to debug the system and find out which person did what change, then the micro-integrator needs to keep a log of activities performed on the micro-integrator. Audit logs are simply a set of logs that let you find what are the changes performed on the micro-integrator instance. Audit logs feature support from the APIM 4.1.0 onward.

Per API Logging Support for WSO2 API Manager

APIM per API logging support lets you enable logging request details per API basis. This will significantly impact APIM performance when you need to collect logs that come in to and out of the APIM instance. Users are able to enable or disable logging for each API by using the APIM REST API. WSO2 APIM logging gives you multiple log levels that let you log information in different levels.

From culture to business to innovation: leveraging cloud to reprogram banks, WSO2 | Finextra

In this 2 part series, Eric Newcomer, Chief Technology Officer at WSO2 speaks to FinextraTV about the type of technologies that are conducive to self-disruption, what banks need to consider when revamping their technology and operations divisions to promote innovation, how this translates into a culture of innovation, and how migration to the cloud reinforce banks’ cybersecurity and resilience.

Reprogramming the bank: Shifting gears on digital disruption, WSO2 | Finextra

In this 2 part series, Eric Newcomer, Chief Technology Officer at WSO2 speaks about self-disruption across the industry, what is meant by this and how this approach is helping FIs address business challenges. We learn how the internal disruption that comes with new technology strategies can benefit the customer, the type of strategies that could formalise this natural disruption to create a process of structured self-disruption, and how this fits in with the regulatory landscape.

Adaptive authentication functions with WSO2 Identity Server

Adaptive authentication is an evolved form of MFA where the authentication mechanism is decided depending on the user’s risk profile and behavior. In this episode of #IdentityIn15, we are going to discuss with you about what is #adaptiveauthentication, sample adaptive authentication script, write a custom adaptive authentication function, and how to use adaptive authentication with the #WSO2identityserver.

GraphQL Subscription support for WSO2 API Manager via WebSockets

Nowadays most businesses adopt GraphQL Subscriptions for their event-driven applications for interactive and immediate user experience. WSO2 API Manager 4.1.0 helps you to create, publish and deploy GraphQL APIs with subscriptions. API Manager Gateway manages your GraphQL subscription backends by applying authentication, authorization, rate limiting, query payload validation, query complexity, and depth validation.