DEV Community

#authentication

User authentication mechanisms

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
SSO Without Giving the Server Your Keys

SSO Without Giving the Server Your Keys

Comments 1
6 min read
Biometric enable in Expo apps ships when every fallback is handled

Biometric enable in Expo apps ships when every fallback is handled

Comments
5 min read
Meet Polaris: A Complete PHP Identity Stack in One Line of Config (Part 1)

Meet Polaris: A Complete PHP Identity Stack in One Line of Config (Part 1)

Comments
6 min read
Signup Email Blocks Need Appeal Paths

Signup Email Blocks Need Appeal Paths

1
Comments
4 min read
Stop keying B2B subscriptions to users | Scalekit + Chargebee for Org-based billing

Stop keying B2B subscriptions to users | Scalekit + Chargebee for Org-based billing

Comments 1
6 min read
Your AI Agent Has an OAuth Token. Does It Have an Identity?

Your AI Agent Has an OAuth Token. Does It Have an Identity?

1
Comments 2
3 min read
Node.js Account Shutdown: Token Revocation and Eventual Deletion in 3 Steps

Node.js Account Shutdown: Token Revocation and Eventual Deletion in 3 Steps

Comments
5 min read
What are JWT tokens and why your app needs them

What are JWT tokens and why your app needs them

1
Comments
4 min read
Authentication APIs Explained: Template-Owned US/EU Login OTP with SMS and Email Fallback

Authentication APIs Explained: Template-Owned US/EU Login OTP with SMS and Email Fallback

Comments
7 min read
Edtech Identity Linking in Go: Resolve, Inspect, Attach Safely (with Recovery)

Edtech Identity Linking in Go: Resolve, Inspect, Attach Safely (with Recovery)

Comments
7 min read
Support Account Defense: Balancing JWKS Caching Against Live Session Introspection

Support Account Defense: Balancing JWKS Caching Against Live Session Introspection

Comments
8 min read
Server-Sent Events Security: How EventSource Breaks Your API Authentication Model

Server-Sent Events Security: How EventSource Breaks Your API Authentication Model

Comments
4 min read
SAML XSW: Signatures That Validate the Wrong Element

SAML XSW: Signatures That Validate the Wrong Element

Comments
5 min read
PKCE Downgrade Attack: When the Authorization Server Accepts Both Flows

PKCE Downgrade Attack: When the Authorization Server Accepts Both Flows

Comments
5 min read
OAuth Access Token Leakage via Logs and APM: The RFC 6750 Warning Nobody Enforced

OAuth Access Token Leakage via Logs and APM: The RFC 6750 Warning Nobody Enforced

Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.