Backend for Frontend (BFF) architectural pattern

Stop exposing access tokens in your Single-Page Applications (SPAs). Learn how to implement the Backend for Frontend (BFF) architectural pattern to radically enhance your OAuth 2.0 and OpenID Connect security. This whitepaper explains how to transition token negotiation and storage away from vulnerable public browser clients and into a secure, confidential backend proxy—keeping your APIs protected and JWTs safely out of the browser.

In this whitepaper, you'll learn:

• The severe security risks associated with token storage in public clients like SPAs.
• How the Backend for Frontend (BFF) pattern shifts token management to a secure, confidential server.
• The complete BFF authentication flow, from OpenID Connect negotiation to proxying API requests.
• How to properly configure HttpOnly session cookies and prevent Cross-Site Request Forgery (CSRF) attacks.