DEV Community

#authentication

User authentication mechanisms

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
What Happens When Your Authentication Is Misconfigured

What Happens When Your Authentication Is Misconfigured

1
Comments
9 min read
Voice Is Not an Authentication Factor Any More. Here Is What the Detection Numbers Actually Say

Voice Is Not an Authentication Factor Any More. Here Is What the Detection Numbers Actually Say

Comments
4 min read
A customer maintenance form in Uniface 10, part 13 - salted password hashes, rights checks in the services, and a session timeout

A customer maintenance form in Uniface 10, part 13 - salted password hashes, rights checks in the services, and a session timeout

Comments
8 min read
How SAML works, and why XML signature wrapping keeps breaking it

How SAML works, and why XML signature wrapping keeps breaking it

Comments
10 min read
The Login Endpoint That Handed Out Tokens Nobody Ever Checked

The Login Endpoint That Handed Out Tokens Nobody Ever Checked

Comments
4 min read
An MFA challenge pass is not object authorization

An MFA challenge pass is not object authorization

Comments
1 min read
Where Do Your Users' Passwords Actually Live? Self-Hosted vs Managed Keycloak

Shifts infrastructure burden from code to ops

Where Do Your Users' Passwords Actually Live? Self-Hosted vs Managed Keycloak

62
Comments 6
12 min read
What Google and Apple tell us when you sign in

What Google and Apple tell us when you sign in

Comments
2 min read
Dot-Form Header Aliases: How Traefik ForwardAuth Identity Spoofing Reached Backends Before 2.11.56

Dot-Form Header Aliases: How Traefik ForwardAuth Identity Spoofing Reached Backends Before 2.11.56

Comments
3 min read
Cheap 2FA Login SMS API Auditability (A NodeJS OTP Endpoint Experiment)

Cheap 2FA Login SMS API Auditability (A NodeJS OTP Endpoint Experiment)

Comments
7 min read
PostgreSQL Idempotency Keys for Email APIs

PostgreSQL Idempotency Keys for Email APIs

Comments
5 min read
Authentication & Sessions in Backends

Authentication & Sessions in Backends

Comments
9 min read
Node.js OTP Defense: List User Sessions and Revoke One Safely

Node.js OTP Defense: List User Sessions and Revoke One Safely

Comments
6 min read
OAuth Scopes Made Sense to Me. Then I Learned About Cedar Policies.

OAuth Scopes Made Sense to Me. Then I Learned About Cedar Policies.

Comments 1
5 min read
OAuth for AI Agents: Why General-Purpose Agents Strain the Integration Model

OAuth for AI Agents: Why General-Purpose Agents Strain the Integration Model

Comments 1
10 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.