Index
A
access tokens
access, limiting 69
access, limiting with audience 70, 71
lifetimes, managing 243-245
limiting, with roles 71-74
limiting, with scope 75-77
obtaining 62-65
validating 77-80
Active Directory 3
integrating with 183-186
active sessions
managing 237-239
admin URL
setting 156, 157
Apache Freemarker 270
application
access, authorizing with OAuth 2.0 25-29
user consent, requiring 65-69
applications
securing 295
attribute-based access control (ABAC) 182
using 145
authentication and access control
enabling, for database 289, 290
authentication flows 202, 203
configuring 204-209
customizing 272-276
WebAuthn, enabling 225-227
authentication request 30
authorization code 15, 44
authorization code flow 15, 26
Authorization Code Injection 113
authorization request 27, 30
authorization system 134, 135
B
backend for frontends (BFF) patterns...