DEV Community

#oauth

OAuth flow implementation details

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Keycloak from Scratch, Part 2 — Authorization Code + PKCE, Built by Hand

Keycloak from Scratch, Part 2 — Authorization Code + PKCE, Built by Hand

Comments
5 min read
Keycloak from Scratch, Part 1 — Realms, Roles, Clients & Users (No Docker Magic, Just Clicks)

Keycloak from Scratch, Part 1 — Realms, Roles, Clients & Users (No Docker Magic, Just Clicks)

Comments
5 min read
We shipped a one-click 'Add to Cursor' button. The hard part wasn't the button.

We shipped a one-click 'Add to Cursor' button. The hard part wasn't the button.

10
Comments 1
3 min read
Giving an AI assistant read-only access to Microsoft Loop — without breaking permissions

Giving an AI assistant read-only access to Microsoft Loop — without breaking permissions

Comments 2
5 min read
I built a full IAM system in Spring Boot — here's what broke when I put it on the internet

I built a full IAM system in Spring Boot — here's what broke when I put it on the internet

2
Comments
3 min read
Bind Email Change Links to the Active Session

Bind Email Change Links to the Active Session

1
Comments
4 min read
How SaaS data exfiltration works, the quiet breaches of 2026

How SaaS data exfiltration works, the quiet breaches of 2026

Comments
4 min read
Logging Into the Higgsfield CLI on a Server With No Browser

Logging Into the Higgsfield CLI on a Server With No Browser

Comments
5 min read
OAuth2 and OpenID Connect: Authentication and Authorization Standards

OAuth2 and OpenID Connect: Authentication and Authorization Standards

1
Comments
17 min read
JWT Validation Against an RSA Public Key: The ValidAlgorithms Gotcha

JWT Validation Against an RSA Public Key: The ValidAlgorithms Gotcha

Comments
2 min read
Token Revocation Is Not an Endpoint

Token Revocation Is Not an Endpoint

1
Comments 1
16 min read
Safer OAuth Device Sign-In Emails

Safer OAuth Device Sign-In Emails

1
Comments
4 min read
How to Test OAuth Recovery Emails Without Exposing Real Inboxes

How to Test OAuth Recovery Emails Without Exposing Real Inboxes

Comments
5 min read
OAUTH2.0 In Action — A Guide To Implementing OAUTH In Apps and Websites.

OAUTH2.0 In Action — A Guide To Implementing OAUTH In Apps and Websites.

Comments
5 min read
I thought giving my group chat AI assistant Google Calendar would take 5 minutes, and then OAuth humbled me

I thought giving my group chat AI assistant Google Calendar would take 5 minutes, and then OAuth humbled me

Comments 1
7 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.