OpenID Connect IntroductionOpenID Connect (OIDC) emerges as a robust solution, offering a seamless way to handle user authentication across multiple platforms. If you're familiar with OAuth 2.0, you're already halfway to understanding OpenID Connect. OIDC builds on the OAuth 2...Jun 2, 2024 · 5 min readcerberauth.hashnode.dev
JWT or Opaque Token : What is the best choice to secure internal communications ?JWT or Opaque Tokens can serve both as authentication mechanisms for Machine to Machine (M2M) communications. But what is the best choice between each solution ? In this brief article, we will try to answer this question. First of all, we should defi...Apr 24, 2024 · 5 min readcerberauth.hashnode.dev
What is the difference between Authentication, Application authorization and Access Control ?Understanding the nuances between authentication, authorization, and fine-grained authorization is crucial. These concepts form the backbone of identity and access management (IAM) systems, laying the groundwork for securing digital assets and ensuri...Mar 7, 2024 · 6 min readcerberauth.hashnode.dev
Users accounts for your SaaS - A Journey with Ory SolutionsWelcome to this blog post series dedicated to security within the Software as a Service (SaaS) landscape. In the upcoming segments of our SaaS security blog series, we will cover critical topics aimed at enhancing your understanding of modern securit...Nov 16, 2023 · 3 min readcerberauth.hashnode.dev
How to verify a JWTUnderstanding JWTs (JSON Web Tokens) and how to effectively validate their authenticity is important. JWT is a versatile tool for securing web applications and APIs, making it vital for developers to possess the knowledge and skills required for thei...Oct 13, 2023 · 4 min readcerberauth.hashnode.dev