DEV Community

#authentication

User authentication mechanisms

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Social Sign-In JWT Verification: Surviving Key Rotation Without Authentication Outages

Social Sign-In JWT Verification: Surviving Key Rotation Without Authentication Outages

Comments
8 min read
OAuth Email Verification Needs a Proof-Carrying Test

OAuth Email Verification Needs a Proof-Carrying Test

1
Comments 1
5 min read
OAuth State Needs a Replay Boundary

OAuth State Needs a Replay Boundary

5
Comments 1
5 min read
Two RouterOS Bugs, One Escalation Path: What CVE-2026-67277 and CVE-2026-86060 Mean for Edge Routers

Two RouterOS Bugs, One Escalation Path: What CVE-2026-67277 and CVE-2026-86060 Mean for Edge Routers

Comments
4 min read
The Bug That Sat Fixed for Three Years: Proxmox VE's Authentication Bypass and the Cost of Unsupported Hypervisors

The Bug That Sat Fixed for Three Years: Proxmox VE's Authentication Bypass and the Cost of Unsupported Hypervisors

Comments
3 min read
Node.js Email Verification Needs Atomic Tokens

Node.js Email Verification Needs Atomic Tokens

Comments 1
5 min read
We changed one timeout from 30 to 480 and back to 30. In between, it stopped meaning the same thing

We changed one timeout from 30 to 480 and back to 30. In between, it stopped meaning the same thing

Comments
19 min read
nixamp 0.17: a room with a door, a ticket and a login

nixamp 0.17: a room with a door, a ticket and a login

Comments
3 min read
Your AI Agent Will Build an Insecure Login, Unless You Tell It Not To

Your AI Agent Will Build an Insecure Login, Unless You Tell It Not To

1
Comments 5
13 min read
Password Strength + Crack Time Estimators

Password Strength + Crack Time Estimators

Comments
12 min read
Your Session Cookie Is Basically a Temporary Password - Part 1

Your Session Cookie Is Basically a Temporary Password - Part 1

Comments
6 min read
When an Authentication Filter Reads the URL Instead of the Route: Lessons from CVE-2026-49869 in Kestra

When an Authentication Filter Reads the URL Instead of the Route: Lessons from CVE-2026-49869 in Kestra

Comments
4 min read
When the Default Configuration Is the Vulnerability: JFrog Artifactory's Empty Join Key and the Supply-Chain Blast Radius

When the Default Configuration Is the Vulnerability: JFrog Artifactory's Empty Join Key and the Supply-Chain Blast Radius

Comments
4 min read
ProfessorOS

ProfessorOS

Comments
3 min read
How JWT Signing Keys Are Issued and Rotated (and Why 'alg' Deserves Distrust)

How JWT Signing Keys Are Issued and Rotated (and Why 'alg' Deserves Distrust)

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.