Learn how to add security to your apps, APIs, and infrastructure so you can spend less time on auth and more time on everything else.

We'll kick off Developer Day by celebrating developers like you building for the web, mobile, cloud infrastructure, and everywhere else code runs around the world.

I like to remember the places I have been, and I always liked the idea of having a map of those places, so as any developer would do, I built a web application for that.

The world of IoT (Internet of Things) has so many options to choose from but very little guidance about how secure they are and how you, as a developer, can prevent unauthorized access. In this session, we will go over what you can do with existing platforms like Alexa and roll your DIY projects to lock down who can use them - YOU.

OAuth is the foundation of most modern online security, used everywhere from signing in to mobile apps to protecting your bank accounts. Despite its ubiquity, there are still many misconceptions about OAuth and OpenID Connect in the wild.

The recently released Auth0 Next.js SDK makes authenticating Next.js apps quick and seamless. We'll go through setting up the SDK to authenticate and protect your routes. Everything is online now, so it's important to keep your application safe, secure, and up-to-date on authentication standards. Let me show you how.

Digital IDs controlled by the users enable users to seamlessly onboard to any web app or platform. With Web Monetization, users can earn and spend freely from their digital Identity connected wallets. This talk with highlight two open standards, the Verifiable Credential Standard and the Web Monetization Standard, and show how developers can build with them today.

Learn how to implement powerful new authentication and authorization scenarios with Kong and Okta. In this demo-heavy session, we will show you how to do sophisticated API access, and API management flows with OIDC and OAuth - including how to plug in Identity into your CI/CD pipelines.

With Okta and JFrog, strengthen your shift-left DevSecOps strategy by validating the security of your application's REST API endpoints before you release it to production and your customers. Learn how you can use Okta and JFrog to automate the validation of your authentication and authorization policies for your REST APIs.

This talk will dive deep into how game and XR developers can balance experience and security using the security best practice standard OAuth. We will discuss the basics of OAuth, designing experiences for different target platforms, and using a player's authorization to interact with other cloud-based backend solutions.

OAuth defines several grant types, but some are more secure than others. In this talk, we'll go over how you can add more security to your applications using PKCE. You'll learn how this builds off of the Authorization Code grant type, and we'll go through a live demo of implementing PKCE in an application.

Join us for an exciting afternoon keynote to close out our first annual Developer Day with Cassidy Williams.