Sagara Gunathunga – Medium

Sagara Gunathunga

Featured Book

Hands-On Spring 6 and Spring Boot 3. 0: A Pragmatic Approach to REST, GraphQL, Reactive Programming and Messaging in Spring (English Edition)

Hands-On Spring 6 and Spring Boot 3. 0: A Pragmatic Approach to REST, GraphQL, Reactive Programming and Messaging in Spring (English Edition)

Hands-on Spring 6 and Spring Boot 3.0: A pragmatic approach to REST, GraphQL, reactive programming and messaging in Spring

2025

Sagara Gunathunga

Sagara Gunathunga

Stories

Unwrapping MCP Security: A Walkthrough with the Paypal MCP Server

(Generated image using Gemini)

May 12

Unwrapping MCP Security: A Walkthrough with the Paypal MCP Server

May 12

Unwrapping MCP : A Walkthrough with the GitHub MCP Server

We started to see the popping up of MCP servers from various organizations — from tools used in software development all the way through…

May 6

Unwrapping MCP : A Walkthrough with the GitHub MCP Server

May 6

What is OAuth 2.0 Protected Resource Metadata (PRM)

At the very core of the OAuth2 authorization framework is a mechanism that allows a client application to access a protected resource on…

May 4

What is OAuth 2.0 Protected Resource Metadata (PRM)

May 4

mTLS and OAuth2 — Certificate-Bound Tokens

In the previous post, we discussed the certificate-based mutual authentication process that takes place during the TLS handshake, and how…

Apr 26

mTLS and OAuth2 — Certificate-Bound Tokens

Apr 26

mTLS and OAuth2 — Client Authentication

Whenever we hit a website or web application, we simply trust the browser to verify its authenticity and establish a secure, encrypted…

Apr 25

mTLS and OAuth2 — Client Authentication

Apr 25

Secure OAuth2: A Simple Story of Two Keys — PKCE

This is the final post in my Secure OAuth2 blog series. I began this series by examining the security gaps in the OAuth2 authorization…

Apr 23

Secure OAuth2: A Simple Story of Two Keys — PKCE

Apr 23

Secure OAuth2 (Part -4) : Securing Response Using JWT Secured Authorization Response Mode (JARM)

So far in this blog series, we’ve explored whether the OAuth2 authorization code grant type has any security imperfections. We’ve already…

Apr 19

Secure OAuth2 (Part -4) : Securing Response Using JWT Secured Authorization Response Mode (JARM)

Apr 19

Secure OAuth2 (Part -3) : Push Authorization Request (PAR) to Rescue

In the very first post of this series, I explored whether the authorization code grant type truly provides the highest level of security —…

Apr 18

Secure OAuth2 (Part -3) : Push Authorization Request (PAR) to Rescue

Apr 18

Secure OAuth2 (Part -2): Put it in a JAR (JWT-Secured Authorization Request)

In my last post — which I published almost a year ago — I explored whether the authorization code grant type truly provides the highest…

Apr 17

Secure OAuth2 (Part -2): Put it in a JAR (JWT-Secured Authorization Request)

Apr 17

Published in

Identity Beyond Borders

Simplify React App Login

Implementing a login feature in a React app involves several key steps to ensure both functionality and security. In this post, we will…

Jul 4, 2024

Simplify React App Login

Jul 4, 2024

Sagara Gunathunga

Sagara Gunathunga

Book Author

Director & Head of DevRel - IAM, WSO2. Integration and Identity Architect. PMC Member @ The Apache Software Foundation

Following

Help

Status

About

Careers

Press

Blog

Privacy

Rules

Terms

Text to speech