DEV Community

#authentication

User authentication mechanisms

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Rate Limiting Fails in Production Because It Counts the Wrong Dimension
rxkov profile
Rxkov

Rate Limiting Fails in Production Because It Counts the Wrong Dimension

#authentication #cybersecurity #production #security
Comments
6 min read
Working: Device Flow Phishing -- The OAuth Attack That Uses the Real Login Page
rxkov profile
Rxkov

Working: Device Flow Phishing -- The OAuth Attack That Uses the Real Login Page

#authentication #cybersecurity #infosec #security
Comments
5 min read
JWT Key Reference Injection: The Attack Class That Wins Bounties While Guides Miss It
rxkov profile
Rxkov

JWT Key Reference Injection: The Attack Class That Wins Bounties While Guides Miss It

#authentication #cybersecurity #infosec #security
Comments
5 min read
Type Juggling in API Authentication: How Sending `true` Bypasses a Password Check
rxkov profile
Rxkov

Type Juggling in API Authentication: How Sending `true` Bypasses a Password Check

#authentication #cybersecurity #php #security
Comments
5 min read
JWT Vulnerabilities Are API Design Bugs: Three Implementation Decisions That Betray Cryptographic Intent
rxkov profile
Rxkov

JWT Vulnerabilities Are API Design Bugs: Three Implementation Decisions That Betray Cryptographic Intent

#api #authentication #cybersecurity #security
Comments
5 min read
The OAuth Implicit Flow Is Deprecated, But Your Access Tokens Are Still Leaking
rxkov profile
Rxkov

The OAuth Implicit Flow Is Deprecated, But Your Access Tokens Are Still Leaking

#authentication #cybersecurity #javascript #security
Comments
4 min read
Three Signal Channels Leak Valid Account Lists Before Authentication Completes: Status Code, Response Body, and Timing
rxkov profile
Rxkov

Three Signal Channels Leak Valid Account Lists Before Authentication Completes: Status Code, Response Body, and Timing

#api #authentication #cybersecurity #security
Comments
5 min read
OAuth 2.0 redirect_uri Bypass: The 5-Condition Matrix That Determines Exploitability
rxkov profile
Rxkov

OAuth 2.0 redirect_uri Bypass: The 5-Condition Matrix That Determines Exploitability

#authentication #cybersecurity #infosec #security
Comments
6 min read
Authentication for AI Agents: Lessons We Can Borrow from Enterprise Identity
neospeed83 profile

Authentication for AI Agents: Lessons We Can Borrow from Enterprise Identity

#authentication #ai #security
Comments 1
3 min read
Self-Hosted SSO from Scratch with Laravel Passport
cammanhhoang profile

Self-Hosted SSO from Scratch with Laravel Passport

#laravel #sso #authentication #tutorial
1
Comments
33 min read
Safer Email Change Flows Start With Proof
sophiax99 profile

Safer Email Change Flows Start With Proof

#security #authentication #privacy #webdev
1
Comments 1
4 min read
Building a Custom MFA and Secure Session Handoff Platform for Shared In-Store Devices
scf-12 profile

Building a Custom MFA and Secure Session Handoff Platform for Shared In-Store Devices

#architecture #authentication #security #systemdesign
Comments
8 min read
The French Tax Leak Started With a Password
julesrobineau profile

The French Tax Leak Started With a Password

#authentication #cybersecurity #infosec #security
Comments
9 min read
JWT Auth Without the Confusion
stackhorizon profile

JWT Auth Without the Confusion

#jwt #authentication #security #webdev
Comments
2 min read
How to Inspect a JWT Without Uploading a Production Token
tanya_monoware profile

How to Inspect a JWT Without Uploading a Production Token

#security #javascript #webdev #authentication
1
Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.