DEV Community

#authentication

User authentication mechanisms

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
How JWT Signing Keys Are Issued and Rotated (and Why 'alg' Deserves Distrust)

How JWT Signing Keys Are Issued and Rotated (and Why 'alg' Deserves Distrust)

Comments
2 min read
Destructive Identity Operations Explained: Login-Method Removal and Full User Deletion

Destructive Identity Operations Explained: Login-Method Removal and Full User Deletion

Comments
8 min read
Amazon Cognito

Amazon Cognito

Comments
5 min read
Better Auth phone numbers with a five-line OTP adapter

Better Auth phone numbers with a five-line OTP adapter

5
Comments
2 min read
Building Offline Auth for Indie Devs

Building Offline Auth for Indie Devs

1
Comments
3 min read
JWT Explained: How JSON Web Tokens Work

JWT Explained: How JSON Web Tokens Work

Comments
4 min read
Python Session Revocation — What Actually Matters in Concrete Forgot-Password Audits

Python Session Revocation — What Actually Matters in Concrete Forgot-Password Audits

1
Comments
7 min read
Why I Added a Go Step-Up Risk Score Gate for Password and Email Changes — 3 Lessons

Why I Added a Go Step-Up Risk Score Gate for Password and Email Changes — 3 Lessons

Comments
5 min read
OAuth Email Proof Is Not Identity Proof

OAuth Email Proof Is Not Identity Proof

1
Comments
4 min read
OAuth Signup: Prove Email Without Trusting It

OAuth Signup: Prove Email Without Trusting It

1
Comments
3 min read
This week at Romi #3 - Building Multi-Platform App Connectivity

This week at Romi #3 - Building Multi-Platform App Connectivity

Comments 1
3 min read
Zero-Password Security: Implementing the Official Laravel Passkeys Stack

Zero-Password Security: Implementing the Official Laravel Passkeys Stack

Comments 1
3 min read
The Non-Human Chronicles

The Non-Human Chronicles

6
Comments
7 min read
Add phone verification to an Express app with Claude Code, with a real OTP behind it

Add phone verification to an Express app with Claude Code, with a real OTP behind it

Comments
3 min read
Two XenForo Flaws in One Release: Empty OAuth2 Credentials and a Passkey That Belonged to Someone Else

Two XenForo Flaws in One Release: Empty OAuth2 Credentials and a Passkey That Belonged to Someone Else

1
Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.