Tech Talks #52

r2c is a startup working to profoundly improve software security and reliability to safeguard human progress. We are a team of AppSec engineers and program analysis experts. Having analyzed thousands of open source projects and spoken with hundreds of Python developers, we identified common security pitfalls that are specific to Python web apps. We partnered with authors of major web frameworks to identify common “gotchas” and create a set of best practices for building robust Python web apps. The tutorial will include:

• Brief overview of common security problems (OWASP Top 10)
• Common gotchas for Flask and Django
• Tools for robust Python backend development
• Q&A

During this presentation I want to to solve one and single problem. "I want to log in with Facebook".

Since 2018 I've attended to multiple presentations which should have prepared me to accomplish this task. I knew the payload structure of JWT, I knew theory of OAuth, I got all the blocks, but they didn't match well. I've tried to stick them together with a StackOverflow Glue™, but along the way I've understood that I didn't get the real-life concept.

The plan for the talk is to go through the path of: - facebook authentication - JWT generation in Django Rest Framework - Django as API setup - <inhales> React setup with Axios to handle session refreshing

In the end I'll demo a working facebook authentication example with a code shared on git.