DEV Community

#authentication

User authentication mechanisms

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
JWT Vulnerabilities Are API Design Bugs: Three Implementation Decisions That Betray Cryptographic Intent

JWT Vulnerabilities Are API Design Bugs: Three Implementation Decisions That Betray Cryptographic Intent

Comments
5 min read
The OAuth Implicit Flow Is Deprecated, But Your Access Tokens Are Still Leaking

The OAuth Implicit Flow Is Deprecated, But Your Access Tokens Are Still Leaking

Comments
4 min read
Three Signal Channels Leak Valid Account Lists Before Authentication Completes: Status Code, Response Body, and Timing

Three Signal Channels Leak Valid Account Lists Before Authentication Completes: Status Code, Response Body, and Timing

Comments
5 min read
OAuth 2.0 redirect_uri Bypass: The 5-Condition Matrix That Determines Exploitability

OAuth 2.0 redirect_uri Bypass: The 5-Condition Matrix That Determines Exploitability

Comments
6 min read
What Happens When You Click “Login”? Understanding Authentication for Beginners

What Happens When You Click “Login”? Understanding Authentication for Beginners

2
Comments
7 min read
Authentication for AI Agents: Lessons We Can Borrow from Enterprise Identity

Authentication for AI Agents: Lessons We Can Borrow from Enterprise Identity

Comments 1
3 min read
Self-Hosted SSO from Scratch with Laravel Passport

Self-Hosted SSO from Scratch with Laravel Passport

1
Comments
33 min read
Safer Email Change Flows Start With Proof

Safer Email Change Flows Start With Proof

1
Comments 1
4 min read
Building a Custom MFA and Secure Session Handoff Platform for Shared In-Store Devices

Building a Custom MFA and Secure Session Handoff Platform for Shared In-Store Devices

Comments
8 min read
JWT Auth Without the Confusion

JWT Auth Without the Confusion

Comments
2 min read
How to Inspect a JWT Without Uploading a Production Token

How to Inspect a JWT Without Uploading a Production Token

1
Comments
4 min read
Why SSO integrations pass SIT and fail in production

Why SSO integrations pass SIT and fail in production

Comments 1
9 min read
Building an Authentication Service in Angular with Signals, JWT & Refresh Tokens

Building an Authentication Service in Angular with Signals, JWT & Refresh Tokens

Comments
7 min read
I Built a Next.js Auth Boilerplate That Saves Developers Two to Four Weeks of Setup Time

I Built a Next.js Auth Boilerplate That Saves Developers Two to Four Weeks of Setup Time

1
Comments 1
6 min read
Facebook Signup APIs Need Inbox Isolation

Facebook Signup APIs Need Inbox Isolation

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.