Build a Java Web App with Instant User Management
We just released a major upgrade of our Java SDK, which now includes Java Webapp (Servlet 3.0+) support with a ton of user automation. Just drop our Servlet plugin into your Java web application and...
View ArticleAutomatically Populate Intercom with User Data
We work with a lot of Startups SaaS companies, and they consistently run into a few challenges when it comes to managing their growing customer base: Its hard to know who your users are Its not always...
View ArticleToken Based Authentication for Single Page Apps (SPAs)
If you’re confused about token-based authentication: this post is for you. We will cover access tokens, how they differ from session cookies, and why they make sense for single page applications...
View Article9 Ways to Build a Great Engineering Culture
If you want to have a successful technology startup, you need more than just a great company culture, you specifically need a great engineering culture. A great culture gives you a tremendous...
View ArticleBrand Integrity: A New .NET Backend To Boost Brand Engagement
Every company needs engaged employees who live the brand. These true believers are more satisfied and productive, drive great customer experiences, and help reduce employee stress and turnover. In...
View ArticleStormpath Helps Couples to Say ‘I Do’
A true Renaissance man, Pedro Baumann wears a number of professional hats: Web designer, Linux SysAdmin, practicing Psychotherapist. But in his free time, the full stack developer plays in Flask. “As a...
View ArticleUpdates to Stormpath Python Support
At Stormpath, we really love our Python users. Over the past year we’ve made: 19 new Python library releases. A brand new Flask library, and pushed over 18 separate releases there. A totally revamped...
View ArticleExploring Microservices Architectures with Stormpath
One of the biggest development trends over the last few years is a move towards architectures based on API services. While it’s increasingly common for new applications to start fresh with a...
View ArticleWhere to Store your JWTs - Cookies vs HTML5 Web Storage
Stormpath has recently worked on token authentication features using JSON Web Tokens (JWT), and we have had many conversations about the security of these tokens and where to store them. If you are...
View ArticleHow to build an app with AngularJS, Node.js and Stormpath in 15 minutes
AngularJS is a framework for building front-end (browser) applications, also known as “Single Page Apps” (SPAs), and we think it’s superb! AngularJS makes it very easy to build a complex, responsive...
View ArticleThe Ultimate Guide to Mobile API Security
Mobile API consumption is a topic that comes up frequently on both Stack Overflow and the Stormpath support channel. It’s a problem that has already been solved, but requires a lot of prerequisite...
View ArticleHow to Manage API Authentication Lifecycle on Mobile Devices
If you didn’t catch it, in the last article I explained how to know to build and deploy a real mobile app that uses OAuth2 authentication for your private API service. In this article, I’m going to...
View ArticleWhy HTTP is Sometimes Better than HTTPS
UPDATED April 2, 2015: This was an April Fools Joke. Read. Laugh. Learn. If you’re building web services, you should most definitely be using HTTPS. As a security company, we frequently get questions...
View ArticleHow to Create and verify JWTs in Java
Java support for JWT (JSON Web Tokens) is in its infancy – the prevalent libraries can require customization around unresolved dependencies and pages of code to assemble a simple JWT. We recently...
View ArticleNew Node.js Release: User Management & Authentication for Loopback
If you’ve been building Node.js applications for a while, you’ve likely heard of Loopback — it’s a very popular Node.js framework for building API services. I’m a huge fan of Loopback, as I’ve found...
View ArticleHow to Write Middleware for Express.js Apps
Express.js is a lightweight HTTP framework for node.js that allows you to create a variety of applications, from a standard website to a REST API. It gets out of your way with a minimal API that you...
View ArticleWhat the Heck is OAuth?
Stormpath spends a lot of time building authentication services and libraries, we’re frequently asked by developers (new and experienced alike): “What the heck is OAuth?”. There’s a lot of confusion...
View ArticleFive Practical Tips for Building Your Java API
Increasingly, Java developers are building APIs for their own apps to consume as part of a micro-services oriented architecture, or for consumption by external services. At Stormpath we do both, and...
View ArticleREST VS SOAP: When Is REST Better?
While the SOAP (Simple Object Access Protocol) has been the dominant approach to web service interfaces for a long time, REST (Representational State Transfer) is quickly winning out and now represents...
View ArticleEasy Unified Identity
Unified Identity is the holy grail of website authentication. Allowing your users to log into your website through any mechanism they want, while always having the same account details, provides a...
View Article