29:41How to Design Single Page Apps with a BFF to make API calls Securely and Prevent Token HijackingPaul FiguraApplication SecurityIdentity & AccessGoSec 2023