WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2025 • Aug 20, 2025 • Session details

Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue

Deepu

Are your AI agents indiscriminately leaking sensitive data across unauthorized user sessions? Discover how OpenFGA and OAuth enforce zero-trust boundaries to keep your applications from going rogue.

Pause
Mute Enter Fullscreen
#1 about 2 min

Current state of security in AI applications

Why the security domain is playing catch-up with rapidly evolving AI protocols and agent interactions.

#2 about 3 min

Top security vulnerabilities for AI applications

How prompt injection, sensitive data leakage, and excessive agency create significant attack surfaces for developers.

#3 about 3 min

Preventing sensitive information disclosure in RAG systems

Why providing dynamic retrieval-augmented generation systems access to sensitive information requires rigorous authorization models.

#4 about 2 min

Limitations of traditional access control in RAG

How dynamic context and complex relationships make role-based access control insufficient for granular AI data retrieval.

#5 about 3 min

Modeling complex permission structures with OpenFGA

Using relationship-based fine-grained access control to manage object-level permissions and complex hierarchies securely.

#6 about 4 min

Implementing OpenFGA document retrieval for AI agents

How an FGA retriever filters vector database results so language models only process authorized documents.

#7 about 3 min

Mitigating excessive agency through scoped tool access

Securing AI agent execution environments by combining zero-trust principles, role-based checks, and fine-grained authorization.

#8 about 1 min

Brokering third-party APIs with OAuth federation

Calling external services securely by using a token vault to broker and refresh federated access credentials.

#9 about 2 min

Managing asynchronous human-in-the-loop workflows for AI

Utilizing the CIBA standard to require synchronous or asynchronous user approvals before allowing AI agents to execute sensitive actions.

#10 about 5 min

Demonstrating step-up authorization and token brokering

A practical implementation showing how to enforce dynamic permissions and manage multi-platform API tokens using a managed identity provider.

Matching moments

1:53 min

Introduction to securing open source AI agent infrastructure

Abdel Fane Abdel Fane · World Congress 2026 North America

1:10 min

Identifying emerging security vulnerabilities in generative AI agents

Alejandro Saucedo Alejandro Saucedo · World Congress 2025

1:10 min

Operational hazards of giving AI agents unrestricted access

Isaac Evans Isaac Evans · World Congress 2026 North America

1:03 min

From read-only models to excessive agency

Alex Olivier Alex Olivier · World Congress 2026 Europe

5:30 min

Risks of granting broad access to AI tools

Javier Garza Javier Garza +4 · World Congress 2026 North America

1:54 min

Uncovering access control flaws in AI-generated code

Christian Heilmann Christian Heilmann +1 · World Congress 2026 North America

More from World Congress 2025

GenAI Security: Navigating the Unseen Iceberg thumbnail
24:33
12 months ago

GenAI Security: Navigating the Unseen Iceberg

Maish Saidel-Keesing

Behind the Code: How Women Are Powering the Future of AI thumbnail
30:28
about 1 year ago

Behind the Code: How Women Are Powering the Future of AI

Alexandra Wudel, Laura Moritz, Madalina Florean

The AI Hype Filter: What’s Real, What’s Investable, What’s Noise? thumbnail
28:12
about 1 year ago

The AI Hype Filter: What’s Real, What’s Investable, What’s Noise?

Justus Lumpe, Konstantin Vinogradov, Nils Eiteneyer, Stephan Wirris

AI in Leadership: How Technology is Reshaping Executive Roles thumbnail
28:19
about 1 year ago

AI in Leadership: How Technology is Reshaping Executive Roles

Bernd Datler, Jasmin Kaiser, Jeff Hausmann, Sonja Alvarez

The AI-Ready Stack: Rethinking the Engineering Org of the Future thumbnail
28:09
about 1 year ago

The AI-Ready Stack: Rethinking the Engineering Org of the Future

Alex Laubscher, Jan Oberhauser, Keno Dreßel, Mirko Novakovic

AI Sovereignty: What Does It Take? thumbnail
29:13
about 1 year ago

AI Sovereignty: What Does It Take?

Boris Hecker, Clemens Wasner, Robin Hermann, Sonja Alvarez

Upcoming sessions on this topic

Open session

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

  • Vikram Vaswani

    Consultant

Open session

Architecting Trusted AI: Coupling Multi-Agent Systems with dbt Semantic Store for Zero-Hallucination

  • Pushkar Mishra

    J.P. Morgan

    Senior Vice President

Open session

Autopsy of an Autonomous Incident: When the Agent Made It Worse

  • Navin Pai

    StackGen

    Director of Engineering

Open session

Build a Zero-Cost AI Agent in Your Browser

  • Aishwarya Mathuria

    Adobe

    Computer Scientist

  • Nishant Thakur

    Adobe

    Senior Computer Scientist

Open session

Teaching AI Coding Agents to Build It Right the First Time

  • Sajeetharan Sinnathurai

    Microsoft

    Principal Product Manager

Open session

React Under Fire: Rendering Performance for Streaming Agent UIs

  • Abhirupa Mitra

    Slack

    Senior Member of Technical Staff

Related videos

Zero-Trust Architecture for Agentic AI: Securing Multi-User Access and Third-Party Integrations thumbnail
26:31
World Congress 2026 North America • 17 days ago

Zero-Trust Architecture for Agentic AI: Securing Multi-User Access and Third-Party Integrations

Borko Djurkovic

The day the chatbot asked for sudo thumbnail
27:48
World Congress 2026 Europe • 3 months ago

The day the chatbot asked for sudo

Alex Olivier

GenAI Security: Navigating the Unseen Iceberg thumbnail
24:33
World Congress 2025 • 12 months ago

GenAI Security: Navigating the Unseen Iceberg

Maish Saidel-Keesing

Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale thumbnail
25:54
World Congress 2026 North America • 16 days ago

Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale

Abdel Fane

The New Security Stack thumbnail
29:59
World Congress 2026 North America • 17 days ago

The New Security Stack

Javier Garza, Sagi Rodin, Andrea Muttoni, James Everingham, Kara Sprague

From Shadow AI to Secure Intelligence: Safe AI Usage in the Enterprise thumbnail
34:52
Europe 2026 Virtual • 3 months ago

From Shadow AI to Secure Intelligence: Safe AI Usage in the Enterprise

Péter Farkas

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.