Forge

The new reCAPTCHA by Google, now easy to use on Outsystems Platform. For more info, https://www.google.com/recaptcha

This plug-in provides an extra layer of security to HTTPS communications.

If you need your Application to offer user self registration, then passwords management can certainly become a major headache.

This application contains a sample implementation of OAuth authentication for Exposed REST APIs

Allows you to add TLS1.0, TLS 1.1 and/or TLS 1.2 protocols to your requests.

Only available for .NET

Wrapper for Forge, a native implementation of TLS (and various other cryptographic tools) in JavaScript. https://github.com/digitalbazaar/forge

Web security sample application. Use cases for encoding and sanitization API.

OutSystems plugin for integrating 1Password App Extension directly into OutSystems Mobile Apps.

With this extension it is possible to encode and decode an identifier for secure linking

Based on the findings and explanation of this article: https://weblog.west-wind.com/posts/2012/nov/24/wcf-wssecurity-and-wse-nonce-authentication

Allows to validate the security of a given password, based on strength and being present in leaked data.

Yubico (https://www.yubico.com) makes physical authentication keys that work by simply pushing a button. This extension allows them to be used in OutSystems projects.

Application to manage and automate the deployment of APIs to the AWS API Gateway

Mobile extension to validate if a device is easily compromised. It validates, on initialization, that the device is not rooted (Android) or jailbroken (iOS). It also validates that a screen lock mechanism is set, a pattern, a pin, or a password. If the device is not secure a message is shown to the user and the app exits without showing any information to the user. Clone of the Secure device plugin with additional security checks.

Due to state of art and more efficient number factorization algorithms, like General Number Field Sieve, RSA keys need to be bigger in terms of the number of bits. Sill, we need a mechanism to make Public-Private digital signatures secure. As so, this extension is meant to be an "extension" of the well known CryptoAPI one, featuring Elliptic Curve Digital signatures algorithms. Such algorithms ensure that keys do not be as long as RSA keys in order to ensure the same security levels, speeding up encryption and decryption of data.

This is a sample application of how we can implement dynamic access control in OutSystems using Groups. This is useful because in OutSystems we can not create role dynamically at runtime and it should be defined at design time (in service studio).

For security reasons you may need to disable the usage of third party keyboards in your app (keyboards that you download from the AppStore for example). That's what this plugin do.

Enable the User to register a password for security purposes.