WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2025 • Aug 20, 2025 • Session details

Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue

Deepu

Are your AI agents indiscriminately leaking sensitive data across unauthorized user sessions? Discover how OpenFGA and OAuth enforce zero-trust boundaries to keep your applications from going rogue.

Pause
Mute Enter Fullscreen
#1 about 2 min

Current state of security in AI applications

Why the security domain is playing catch-up with rapidly evolving AI protocols and agent interactions.

#2 about 3 min

Top security vulnerabilities for AI applications

How prompt injection, sensitive data leakage, and excessive agency create significant attack surfaces for developers.

#3 about 3 min

Preventing sensitive information disclosure in RAG systems

Why providing dynamic retrieval-augmented generation systems access to sensitive information requires rigorous authorization models.

#4 about 2 min

Limitations of traditional access control in RAG

How dynamic context and complex relationships make role-based access control insufficient for granular AI data retrieval.

#5 about 3 min

Modeling complex permission structures with OpenFGA

Using relationship-based fine-grained access control to manage object-level permissions and complex hierarchies securely.

#6 about 4 min

Implementing OpenFGA document retrieval for AI agents

How an FGA retriever filters vector database results so language models only process authorized documents.

#7 about 3 min

Mitigating excessive agency through scoped tool access

Securing AI agent execution environments by combining zero-trust principles, role-based checks, and fine-grained authorization.

#8 about 1 min

Brokering third-party APIs with OAuth federation

Calling external services securely by using a token vault to broker and refresh federated access credentials.

#9 about 2 min

Managing asynchronous human-in-the-loop workflows for AI

Utilizing the CIBA standard to require synchronous or asynchronous user approvals before allowing AI agents to execute sensitive actions.

#10 about 5 min

Demonstrating step-up authorization and token brokering

A practical implementation showing how to enforce dynamic permissions and manage multi-platform API tokens using a managed identity provider.

Matching moments

1:10 min

Identifying emerging security vulnerabilities in generative AI agents

Alejandro Saucedo Alejandro Saucedo · World Congress 2025

1:03 min

From read-only models to excessive agency

Alex Olivier Alex Olivier · World Congress 2026 Europe

3:51 min

Governing and auditing internal AI agents for security

Michele Zuccala Michele Zuccala +4 · World Congress 2026 Europe

2:43 min

Setting effective guardrails for enterprise agentic AI adoption

Julia Kordick Julia Kordick · Coffee With Developers

4:15 min

Security integration and AI skepticism in developer tooling

Chris Heilmann Chris Heilmann +2 · LIVE

3:19 min

Designing fine-grained permissions for agent interactions with financial services

Milin Desai Milin Desai +3 · World Congress 2026 Europe

More from World Congress 2025

GenAI Security: Navigating the Unseen Iceberg thumbnail
24:33
11 months ago

GenAI Security: Navigating the Unseen Iceberg

Maish Saidel-Keesing

Behind the Code: How Women Are Powering the Future of AI thumbnail
30:28
about 1 year ago

Behind the Code: How Women Are Powering the Future of AI

Alexandra Wudel, Laura Moritz, Madalina Florean

The AI Hype Filter: What’s Real, What’s Investable, What’s Noise? thumbnail
28:12
about 1 year ago

The AI Hype Filter: What’s Real, What’s Investable, What’s Noise?

Justus Lumpe, Konstantin Vinogradov, Nils Eiteneyer, Stephan Wirris

AI in Leadership: How Technology is Reshaping Executive Roles thumbnail
28:19
about 1 year ago

AI in Leadership: How Technology is Reshaping Executive Roles

Bernd Datler, Jasmin Kaiser, Jeff Hausmann, Sonja Alvarez

The AI-Ready Stack: Rethinking the Engineering Org of the Future thumbnail
28:09
about 1 year ago

The AI-Ready Stack: Rethinking the Engineering Org of the Future

Alex Laubscher, Jan Oberhauser, Keno Dreßel, Mirko Novakovic

AI Sovereignty: What Does It Take? thumbnail
29:13
about 1 year ago

AI Sovereignty: What Does It Take?

Boris Hecker, Clemens Wasner, Robin Hermann, Sonja Alvarez

Related videos

The day the chatbot asked for sudo thumbnail
27:48
World Congress 2026 Europe • 3 months ago

The day the chatbot asked for sudo

Alex Olivier

GenAI Security: Navigating the Unseen Iceberg thumbnail
24:33
World Congress 2025 • 11 months ago

GenAI Security: Navigating the Unseen Iceberg

Maish Saidel-Keesing

From Shadow AI to Secure Intelligence: Safe AI Usage in the Enterprise thumbnail
34:52
Europe 2026 Virtual • 3 months ago

From Shadow AI to Secure Intelligence: Safe AI Usage in the Enterprise

Péter Farkas

Building Sovereign AI: Lessons from Deploying Secure RAG Systems using Confidential Computing thumbnail
31:52
World Congress 2026 Europe • 3 months ago

Building Sovereign AI: Lessons from Deploying Secure RAG Systems using Confidential Computing

Isha Salania

Building Agents Securely at Scale - Alfonso Graziano thumbnail
31:49
Coffee With Developers • 5 months ago

Building Agents Securely at Scale - Alfonso Graziano

Alfonso Graziano

On a Secret Mission: Developing AI Agents thumbnail
29:03
World Congress 2025 • about 1 year ago

On a Secret Mission: Developing AI Agents

Jörg Neumann

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.