DEV Community

#authentication

User authentication mechanisms

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Your AI Agent Has an OAuth Token. Does It Have an Identity?
fathin_dosunmu profile

Your AI Agent Has an OAuth Token. Does It Have an Identity?

#agents #mcp #security #authentication
1
Comments 2
3 min read
Node.js Account Shutdown: Token Revocation and Eventual Deletion in 3 Steps
magnusberg2958 profile

Node.js Account Shutdown: Token Revocation and Eventual Deletion in 3 Steps

#account #shutdown #profile #authentication
Comments
5 min read
What are JWT tokens and why your app needs them
_stefano_pinato profile

What are JWT tokens and why your app needs them

#dotnet #security #webdev #authentication
1
Comments
4 min read
Authentication APIs Explained: Template-Owned US/EU Login OTP with SMS and Email Fallback
gregorsterling9652 profile

Authentication APIs Explained: Template-Owned US/EU Login OTP with SMS and Email Fallback

#authentication #sms #api
Comments
7 min read
Edtech Identity Linking in Go: Resolve, Inspect, Attach Safely (with Recovery)
carterhughes6849 profile

Edtech Identity Linking in Go: Resolve, Inspect, Attach Safely (with Recovery)

#go #authentication #identity
Comments
7 min read
Support Account Defense: Balancing JWKS Caching Against Live Session Introspection
theodorhawkins9251 profile

Support Account Defense: Balancing JWKS Caching Against Live Session Introspection

#authentication #security #api #architecture
Comments
8 min read
SAML XSW: Signatures That Validate the Wrong Element
rxkov profile
Rxkov

SAML XSW: Signatures That Validate the Wrong Element

#authentication #cybersecurity #infosec #security
Comments
5 min read
Server-Sent Events Security: How EventSource Breaks Your API Authentication Model
rxkov profile
Rxkov

Server-Sent Events Security: How EventSource Breaks Your API Authentication Model

#api #authentication #backend #security
Comments
4 min read
PKCE Downgrade Attack: When the Authorization Server Accepts Both Flows
rxkov profile
Rxkov

PKCE Downgrade Attack: When the Authorization Server Accepts Both Flows

#authentication #cybersecurity #security
Comments
5 min read
OAuth Access Token Leakage via Logs and APM: The RFC 6750 Warning Nobody Enforced
rxkov profile
Rxkov

OAuth Access Token Leakage via Logs and APM: The RFC 6750 Warning Nobody Enforced

#api #authentication #cybersecurity #security
Comments
5 min read
OAuth Flow CSRF: How a Missing State Parameter Enables Forced Authorization
rxkov profile
Rxkov

OAuth Flow CSRF: How a Missing State Parameter Enables Forced Authorization

#authentication #cybersecurity #security
Comments
5 min read
Working: Magic Link Tokens Live in Your Logs — And TOTP Has a Second Endpoint
rxkov profile
Rxkov

Working: Magic Link Tokens Live in Your Logs — And TOTP Has a Second Endpoint

#authentication #cybersecurity #infosec #security
Comments
5 min read
HMAC Proves Origin, Not Freshness: Replay Attacks Against Signed APIs
rxkov profile
Rxkov

HMAC Proves Origin, Not Freshness: Replay Attacks Against Signed APIs

#api #authentication #cybersecurity #security
Comments
6 min read
Rate Limiting Fails in Production Because It Counts the Wrong Dimension
rxkov profile
Rxkov

Rate Limiting Fails in Production Because It Counts the Wrong Dimension

#authentication #cybersecurity #production #security
Comments
6 min read
API Session Fixation Is Three Attacks, Not One — and Rotating Tokens Blocks None of Them
rxkov profile
Rxkov

API Session Fixation Is Three Attacks, Not One — and Rotating Tokens Blocks None of Them

#api #authentication #cybersecurity #security
Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.