BFF Pattern and the Token-Protection Security Model
The security motivation, structure, and threat model (token theft vs. session riding) of the Backend for Frontend (BFF) pattern, which eliminates token exposure in SPAs
The security motivation, structure, and threat model (token theft vs. session riding) of the Backend for Frontend (BFF) pattern, which eliminates token exposure in SPAs
Explanation of Service Principal concepts in Azure, differences from Managed Identity, and Federated Identity Credential (OIDC) used in GitHub Actions