Gary Archer questions

Gary Archer answers

• Explain Offline Token validation vs Online Token validation in Open ID connect ? Advantages, limitations & tradeoffs
• Set OpenID Connect CallbackPath to HTTPS
• PEM Certificate & TLS Verification against REST api
• Refresh Token Rotation - is it really enough?
• AWS Cognito JWT attribute-based routing
• Options for token storage and refresh in SPAs
• How to implement the OAuth2 Authorization code grant with PKCE for a React single page application?
• Google SAML app_not_configured_for_user / equivalent of prompt=select_account SAML
• Node express with OpenID connect
• OAuth2 based SSO