DEV Community

#authentication

User authentication mechanisms

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
How Backend Authentication Works: From Passwords to Sessions and JWTs

How Backend Authentication Works: From Passwords to Sessions and JWTs

2
Comments
7 min read
The Login Endpoint That Handed Out Tokens Nobody Ever Checked

The Login Endpoint That Handed Out Tokens Nobody Ever Checked

Comments
4 min read
How SAML works, and why XML signature wrapping keeps breaking it

How SAML works, and why XML signature wrapping keeps breaking it

Comments
10 min read
An MFA challenge pass is not object authorization

An MFA challenge pass is not object authorization

Comments
1 min read
What Google and Apple tell us when you sign in

What Google and Apple tell us when you sign in

Comments
2 min read
Dot-Form Header Aliases: How Traefik ForwardAuth Identity Spoofing Reached Backends Before 2.11.56

Dot-Form Header Aliases: How Traefik ForwardAuth Identity Spoofing Reached Backends Before 2.11.56

Comments
3 min read
Cheap 2FA Login SMS API Auditability (A NodeJS OTP Endpoint Experiment)

Cheap 2FA Login SMS API Auditability (A NodeJS OTP Endpoint Experiment)

Comments
7 min read
PostgreSQL Idempotency Keys for Email APIs

PostgreSQL Idempotency Keys for Email APIs

Comments
5 min read
Authentication & Sessions in Backends

Authentication & Sessions in Backends

Comments
9 min read
Securing an Angular Firebase AI App with Email/Password Authentication (Part 2: Signal Forms Sign-In Modal) [GDE]

Securing an Angular Firebase AI App with Email/Password Authentication (Part 2: Signal Forms Sign-In Modal) [GDE]

6
Comments 2
6 min read
Node.js OTP Defense: List User Sessions and Revoke One Safely

Node.js OTP Defense: List User Sessions and Revoke One Safely

Comments
6 min read
OAuth Scopes Made Sense to Me. Then I Learned About Cedar Policies.

OAuth Scopes Made Sense to Me. Then I Learned About Cedar Policies.

Comments 1
5 min read
Your SaaS Has 10,000 Users. Who Removes Their Access When They Leave?

Active sessions often linger without SCIM

Your SaaS Has 10,000 Users. Who Removes Their Access When They Leave?

76
Comments 12
14 min read
OAuth for AI Agents: Why General-Purpose Agents Strain the Integration Model

OAuth for AI Agents: Why General-Purpose Agents Strain the Integration Model

Comments 1
10 min read
OAuth Test Emails Need a Replay Budget

OAuth Test Emails Need a Replay Budget

1
Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.