Profile picture of Travis Spencer Travis Spencer — Software Engineer


Hypermedia Authentication API Resources

Last updated:

In my last post, I described the hypermedia authentication API that we're building at Curity. Since then, we released the API into GA, and have published a lot more resources to learn about it. Here is a growing list of those:

  1. Jacob Ideskog's article about how ROPC is dead and how hypermedia is the replacement
  2. My summary of Jacob's article
  3. What the Hypermedia Authentication API is
  4. Curity's authentication API product marketing info
  5. API product documentation
  6. A walkthrough of Curity's demo API client
  7. A Webinar where we explain the Curity API and the idea in general
  8. Another Webinar about using the API from attested Android and iOS apps
  9. Tutorial explaining how to use the hypermedia API with Android apps
  10. Source code of Android demo app that uses the API to perform login 🅝🅔🅦
  11. Example video showing integration with Duo (a mobile authentication app)
  12. Localization in the API
  13. How to use the iOS SDK with the API (video demo)
  14. Webinar explaining the iOS integration
  15. Source code of iOS demo app that uses the API to perform login 🅝🅔🅦
  16. OAuth without redirects, which is important since the hypermedia API doesn't use browser redirects
  17. My presentation to the OpenID Foundation's FAPI working group
  18. Whitepaper describing the security of the API in detail 🅝🅔🅦
  19. Nordic APIs article providing an overview of the API 🅝🅔🅦
  20. App2App logins via Hypermedia Authentication API 🅝🅔🅦

I'll update this list as more are published. In the meantime, if you want to learn more about this or have comments, contact me on Twitter or LinkedIn.