> For the complete documentation index, see [llms.txt](https://ztrust.gitbook.io/ztrust-documentation/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ztrust.gitbook.io/ztrust-documentation/user-manual-ztrust-v4.1/5.-securing-applications.md).

# 5. Securing Applications

**ZTrust** implements the **OpenID Connect (OIDC)** standard, providing endpoints and token types used in authentication, session management, and secure API access.

1. [Tokens](/ztrust-documentation/user-manual-ztrust-v4.2/5.-securing-applications/5.1-tokens-used-in-ztrust.md)
2. [Endpoints](/ztrust-documentation/user-manual-ztrust-v4.2/5.-securing-applications/5.2-endpoints-available-in-ztrust.md)
3. [Securing Spring Boot Application](/ztrust-documentation/user-manual-ztrust-v4.2/5.-securing-applications/5.3-securing-a-spring-boot-application.md)
4. [Securing Python Application](/ztrust-documentation/user-manual-ztrust-v4.2/5.-securing-applications/5.4-securing-a-python-application.md)
5. [OAuth Integration Manual using ZTrust](/ztrust-documentation/user-manual-ztrust-v4.2/5.-securing-applications/5.5-securing-a-commercial-off-the-shelf-cots-application.md)
6. [Securing Next.js with ZTrust via NextAuth.js OAuth](/ztrust-documentation/user-manual-ztrust-v4.2/5.-securing-applications/5.6-securing-a-next.js-application.md)

{% hint style="warning" %}
**Note:** Before proceeding to secure your application, make sure to review the sections on **Tokens** and **Endpoints**.

* **Tokens** define how authentication and authorization data is exchanged.
* **Endpoints** provide the entry points to request, validate, and manage these tokens.
  {% endhint %}
