@emmanuelgautier

OpenID Connect Introduction

Jun 2, 2024 · 5 min read · OpenID Connect (OIDC) emerges as a robust solution, offering a seamless way to handle user authentication across multiple platforms. If you're familiar with OAuth 2.0, you're already halfway to understanding OpenID Connect. OIDC builds on the OAuth 2...

JWT or Opaque Token : What is the best choice to secure internal communications ?

Apr 24, 2024 · 5 min read · JWT or Opaque Tokens can serve both as authentication mechanisms for Machine to Machine (M2M) communications. But what is the best choice between each solution ? In this brief article, we will try to answer this question. First of all, we should defi...

What is the difference between Authentication, Application authorization and Access Control ?

Mar 7, 2024 · 6 min read · Understanding the nuances between authentication, authorization, and fine-grained authorization is crucial. These concepts form the backbone of identity and access management (IAM) systems, laying the groundwork for securing digital assets and ensuri...

Users accounts for your SaaS - A Journey with Ory Solutions

Nov 16, 2023 · 3 min read · Welcome to this blog post series dedicated to security within the Software as a Service (SaaS) landscape. In the upcoming segments of our SaaS security blog series, we will cover critical topics aimed at enhancing your understanding of modern securit...

How to verify a JWT

Oct 13, 2023 · 4 min read · Understanding JWTs (JSON Web Tokens) and how to effectively validate their authenticity is important. JWT is a versatile tool for securing web applications and APIs, making it vital for developers to possess the knowledge and skills required for thei...