Bibek Joshi·Aug 23Demystifying OAuth 2.0: Front Channels, Back Channels, and Secure LoginsThere was a time when sharing your contact list with a new app meant doing the unthinkable: handing over your actual email password. Before…A response icon1A response icon1
Pushkar Bankar·Apr 22The Delegation Problem: What Actually Led to OAuthUnderstanding how modern apps securely access your data without ever touching your credentials
Khathlong·Feb 13Why Your .NET API Passed Testing but Still Failed AuthorisationThe API passed functional testing. It passed user acceptance testing. It failed penetration testing within minutes.
Ahmed Yawer·Jan 25OAuth2, short clear explinationUsage When a user is already logged into an authorisation server (photoSoter in our exmaple). Now that user would like to gain access into…
Sanshray·Jan 25OAuth 2.0: Flow, DemystifiedEver clicked “Sign in with Google” and wondered what sorcery happens behind the scenes? Let’s break it down, no jargon soup, just the real…
Perry George·Jan 18Understanding Authentication: Basic, Sessions, and JWT ImplementationImplementing authorisation to communicate with a server can take many methods, all have advantages and trade offs. This is why you need to…
Dipti Vasani·Jan 18Session Management :Try Hack Me — walkthroughWhat’s up, hackers? Ready to dive into another challenge? 🚀
Jason Conway-Williams·Jan 12Introducing Janus 🥳: Self-Contained Serverless Authorisation with Cedar 🚀Introduction
