DEV Community

#oauth

OAuth flow implementation details

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
One Callback URL Misconfiguration Leaks Every OAuth Token

One Callback URL Misconfiguration Leaks Every OAuth Token

Comments 1
6 min read
Implement GitHub OAuth2 Authorization Login in Springboot

Implement GitHub OAuth2 Authorization Login in Springboot

Comments 1
4 min read
How to Compare OAuth vs Native Credentials: Identity Ownership and Session Tradeoffs

How to Compare OAuth vs Native Credentials: Identity Ownership and Session Tradeoffs

Comments
6 min read
OAuth Signup Needs More Than Email Proof

OAuth Signup Needs More Than Email Proof

5
Comments 1
4 min read
Week 13: A Kid Only the Platform Can Read

Week 13: A Kid Only the Platform Can Read

Comments
4 min read
Making Refresh Tokens Actually Work in a FastMCP Google OAuth Server

Making Refresh Tokens Actually Work in a FastMCP Google OAuth Server

Comments
5 min read
OAuth Email Links Need Trust Boundaries

OAuth Email Links Need Trust Boundaries

1
Comments
4 min read
Custom ID-JAG on PingFederate, Part 1: Can PingFederate 12.3.3 Issue an ID-JAG?

Custom ID-JAG on PingFederate, Part 1: Can PingFederate 12.3.3 Issue an ID-JAG?

Comments
4 min read
Custom ID-JAG on PingFederate, Part 3: Managing the Integration with Terraform

Custom ID-JAG on PingFederate, Part 3: Managing the Integration with Terraform

Comments
4 min read
Custom ID-JAG on PingFederate, Part 2: Building the Generator and Handling Runtime Constraints

Custom ID-JAG on PingFederate, Part 2: Building the Generator and Handling Runtime Constraints

Comments
4 min read
Custom ID-JAG on PingFederate, Part 4: Testing Live Issuance Without Overclaiming

Custom ID-JAG on PingFederate, Part 4: Testing Live Issuance Without Overclaiming

Comments
4 min read
Supercharging DeepSeek Harness: Bringing Claude Pro/Max with One-Click Google/Gmail OAuth Login and Real-Time Quota Tracking

Supercharging DeepSeek Harness: Bringing Claude Pro/Max with One-Click Google/Gmail OAuth Login and Real-Time Quota Tracking

1
Comments
5 min read
The confused deputy, or why "just forward the token" breaks your MCP server

The confused deputy, or why "just forward the token" breaks your MCP server

Comments
3 min read
Seven ways a remote MCP server gets authorization wrong

Seven ways a remote MCP server gets authorization wrong

Comments
5 min read
OAuth 2.1 for MCP servers, done properly

OAuth 2.1 for MCP servers, done properly

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.