> Markdown version of [/events/world-congress-2026-europe/sessions/1159-keeping-applications](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1159-keeping-applications). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Keeping applications secure by evolving OAuth 2.0 and OpenID Connect


- **Date:** Thursday, Jul 9, 2026
- **Time:** 16:10–16:40 (30 min)
- **Room:** Stage 10 - powered by TikTok
- **Event:** World Congress 2026 Europe

## Recording

[Watch recording](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)

## Description

OAuth 2.0 and OpenID Connect have been around for years to secure web and mobile applications alike with growing popularity.

To keep your applications and their data secure, these standards are evolving to align with security best practices.

Join this talk to see how the FAPI 2.0 Security Profile and the upcoming OAuth 2.1 standard promotes and enforces best practices, how to adapt your applications, and how Keycloak as an Open Source IAM can help you. Expect a demo and examples for some of the enhancements.

## Speaker

### [Alexander Schwartz](https://www.wearedevelopers.com/@alexander-schwartz)

Principal Software Engineer at IBM


## Related talks at this congress

- [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1175-passkeys-truly) — Martina Kraus
- [Bulletproof Web Applications: The 2025 OWASP Top Ten](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1077-bulletproof-web) — Christian Wenz
- [Beyond authentication: an open-source trust model for the agentic web](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1081-beyond) — Alexander Günsche, Sabrina Engling
- [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/events/world-congress-2026-europe/sessions/1261-small-secure) — Ross Kukulinski