Philippe De Ryck

Hi, I'm Philippe, and I help developers protect companies through better web security. As the founder of Pragmatic Web Security, I travel the world to teach practitioners the ins and outs of building secure software.

Want to learn more about OAuth 2.0 and OpenID Connect?

Save yourself days of digging through dozens of specs with this online course

More information

Resources Articles Articles tagged with "API"

Articles tagged with "API"

7 Ways to Avoid JWT Security Pitfalls

Like them or hate them, JSON Web Tokens (JWT) are everywhere. Unfortunately, JWTs also lie at the heart of numerous API security failures. In this article, we cover seven techniques that will help you avoid JWT security pitfalls.

22 December 2021 API Security API, JWT

Tamper-proof URL parameters with JWTs

URL parameters are straightforward to send information along in a request. Decades ago, we already used them to transport session identifiers, and today, many applications still use them for all kinds of purposes. But are URL parameters secure? What alternatives are there? Keep reading to find out more.

14 April 2020 API Security API, JWT, Crypto

The hard parts of JWT security nobody talks about

In spite of the popularity of JWTs, their security properties are often unknown or misunderstood. How do you choose the signature scheme for a JWT? What other properties should you verify before trusting a JWT? How do you handle key rotation and key management? Read on for a deep-dive into JWT security.

13 March 2020 API Security API, JWT, Crypto

All article tags

API (3) ,  JWT (3) ,  Crypto (2) ,  OAuth 2.0 (8) ,  LocalStorage (1) ,  XSS (12) ,  Refresh tokens (2) ,  PKCE (1) ,  Single Page Applications (7) ,  React (3) ,  Recording (1) ,  Training (1) ,  OIDC (4) ,  Online Courses (3) ,  Flow Simulator (2) ,  Authentication (1) ,  Browser Security (5) ,  X-Frame-Options (XFO) (1) ,  Content Security Policy (CSP) (5) ,  Angular (2) ,  Scully (1) ,  Trusted Types (1)

Want to learn more about OAuth 2.0 and OpenID Connect?

Save yourself days of digging through dozens of specs with this online course

More information
Philippe De Ryck

Dr. Philippe De Ryck

Hi, I'm Philippe, and I help developers protect companies through better web security. As the founder of Pragmatic Web Security, I travel the world to teach practitioners the ins and outs of building secure software.

Talks and workshops

You will often find me speaking and teaching at public and private events around the world. My talks always encourage developers to step up and get security right.

Security resources

Getting security right is all about knowledge. I strongly believe in sharing that knowledge to move forward as a community. Among my resources, you can find developer cheat sheets, recorded talks, and extensive slide decks.

Mailing list

Subscribe to the Pragmatic Web Security mailing list to stay up to date on the latest activities and resources.

Subscribe