API Security with Membrane API Gateway

OAuth2 and OIDC

• JWT Token Validation against Microsoft's Azure AD
  Tutorial that explains how to set up JWT validation with Azure AD
• Using OAuth2 Authentication with Postman
  Tutorial on generating and using OAuth2 tokens within Postman (Lite version supported)
• Automatic Certificate Renewal with ACME
  Tutorial on setting up automatic certificate renewal for Let's Encrypt using ACME.

Have a look at the API Gateway tutorials and the samples in theexamples/oauth2 folder of the Membrane distribution.

Other

In the examples folder you will find more security plugins:

• GraphQL Protection
• JSON Protection
• XML Protection
• SSL/TLS
• BasicAuthentication
• ACL

API Security Basics

• What Is a Bearer Token?
  Simple explanation of bearer token authentication for APIs with HTTP examples and step-by-step authorization flow diagrams.