DEV Community

#authentication

User authentication mechanisms

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
OAuth sign-in: letting users bring an identity they already trust

OAuth sign-in: letting users bring an identity they already trust

Comments
3 min read
Sign in with Google fails on my live site: redirect_uri_mismatch

Sign in with Google fails on my live site: redirect_uri_mismatch

Comments
4 min read
Spoofing is not stealing: the CVE-2026-104935 authentication problem

Spoofing is not stealing: the CVE-2026-104935 authentication problem

Comments
2 min read
AAGUID policies for passkeys: what they really enforce

AAGUID policies for passkeys: what they really enforce

Comments
4 min read
Port 27017 and 1,676,736 Matches: Databases That Answer Before Anyone Authenticates

Port 27017 and 1,676,736 Matches: Databases That Answer Before Anyone Authenticates

Comments
2 min read
A REST API State Machine for Email Verification

A REST API State Machine for Email Verification

Comments
5 min read
What Contributing to Two Keycloak Projects Taught Me About Building Authentication Extensions

What Contributing to Two Keycloak Projects Taught Me About Building Authentication Extensions

1
Comments
8 min read
Your Login Kept the Session ID the Attacker Gave You

Your Login Kept the Session ID the Attacker Gave You

Comments
2 min read
Login broken after publishing: users land back on the login page

Login broken after publishing: users land back on the login page

Comments
2 min read
3.9 million PostgreSQL services and the pg_hba line that decides everything

3.9 million PostgreSQL services and the pg_hba line that decides everything

Comments
3 min read
OAuth Test Tokens Need a Trust Boundary

OAuth Test Tokens Need a Trust Boundary

Comments
4 min read
Golden ticket detection: the forged TGT that never touches the krbtgt password

Golden ticket detection: the forged TGT that never touches the krbtgt password

Comments
3 min read
Confirmation email link opens localhost instead of my app

Confirmation email link opens localhost instead of my app

Comments
3 min read
Do not construct authentication policy inside a login helper

Do not construct authentication policy inside a login helper

Comments
4 min read
HTTP Basic Authentication Explained (RFC 7617)

HTTP Basic Authentication Explained (RFC 7617)

Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.