Install
Identity, Auth & Access
OAuth/OIDC, SSO, policy engines, and permissions at scale.
- 8 Tracked terms
- Last 30 days Feed window
What this topic collects on
An article joins this feed when it matches these terms. Each one is also a search of its own.
Related topics
Latest in Identity, Auth & Access
How to Set Up Auth0 Organizations (SSO, Branding & Invitations)
16+ hour, 48+ min ago (298+ words) Stop Building Multi-Tenant Auth from Scratch. Use This Instead. Building a B2B SaaS application requires a complex multi-tenant infrastructure. In this technical walkthrough, Shreya Gupta and Lily Wisecarver demonstrate how to use Auth0 Organizations to effortlessly manage identity workflows for your business…...
JWT vs Session Tokens in Spring Boot: A Senior Dev’s Decision Guide
1+ day, 52+ min ago (34+ words) A practical decision guide on choosing between JWT and session tokens in Spring Boot. Three years ago I gave the same answer …...
Expo + Supabase GitHub Auth Broke 3 Times — Here's the Fix
2+ day, 1+ hour ago (891+ words) TL;DR: GitHub login in my Expo app broke three separate times. A deep link that went nowhere. A PKCE flow I wired backwards. A redirect URL with a typo. Each fix is copy-pasteable below. Total auth code is under…...
Secure Your.NET API in 15 Minutes: JWT Authentication Tutorial
1+ day, 22+ hour ago (33+ words) If your API is public by default, you don’t have an API. You have a data leak waiting to happen.” You don’t need …...
How Zero Trust Networking Improves Cloud Security
2+ day, 13+ hour ago (513+ words) My take, stated plainly: traditional network security assumed a trusted interior and an untrusted exterior, with a clear boundary between them. Cloud infrastructure doesn't really have that boundary in any meaningful sense anymore, and pretending it still does is exactly…...
I Made Four Authorization Engines Answer the Same Questions
2+ day, 13+ hour ago (65+ words) Cedar, OPA/Rego, Casbin and a Zanzibar-style ReBAC model, given identical rules and every possible request, with the disagreements drawn on screen. Runs entirely in the browser. Tagged with showdev, authorization, security, webassembly....
JWT Internals: What’s Actually Inside That Token You Trust
2+ day, 17+ hour ago (268+ words) Explore what's really inside a JWT: how the header, payload, and signature work together, get verified, and where security pitfalls often hide....
JWT Exploits: Three Ways Trust Gets Misconfigured
2+ day, 17+ hour ago (714+ words) Discover three real-world JWT vulnerabilities caused by misconfigured trust, alg confusion, weak secrets, and none algorithm abuse, and how to prevent them....
VAX, TCP/IP, and Thirty Years of the Same Trust Problem
4+ day, 6+ hour ago (409+ words) A Japanese version of this is on Note. In 1992 I worked for a large US computer company's Japan office. The machine in front of me was a VAX running VMS. Across the room, another terminal ran HP-UX. Something as basic…...
Enforce access control with a few custom linter rules
4+ day, 9+ hour ago (593+ words) The scariest bug in a B2B SaaS isn't a 500. It's a 200 with someone else's data in it. I work at malibou, an HRIS that also runs payroll for its customers, built on Next.js with Clerk for authentication. Every row we…...