Tag feed

#authentication

2,255 posts100 followers

NBNripesh Bhusalbackendtheory.hashnode.dev

Authentication & Authorisation

History of Authentication: Early Civilisation: Authentication and methods of Authenticating someone, has existed since the advent of Civilisation. Earlier modes of Authentication came from Trust, like

1d ago10 min read

MRMohammad Reza Mirzadzareblog.mirzadzare.net

IP Spoofing to Account Takeover: You Patched It? Really?

Abstract In my previous article, I described how I found a security flaw in a popular desktop app's OAuth flow that allowed me to steal any user's account with just one click. I reported it, saw it pa

2d ago7 min read

IIAMDevBoxiamdevbox.hashnode.dev

Keycloak Realm Federation: Connecting Multiple Identity Sources

Keycloak Realm Federation allows you to connect multiple identity sources within a single Keycloak realm, enabling unified authentication and authorization. This means you can manage users and their access across different directories and systems thr...

2d ago6 min read

OKOnkar Konkark.hashnode.dev

Token Based Auth System [state-less]

In a token-based system, HS256 and RS256 are the two most common algorithms used to sign the token. 1. HS256 This method is mostly used in monolith application, where it only requires single key.

3d ago2 min read

SUSamuel Urah Yahayasamywrites.hashnode.dev

Google SSO and the Single Point of Failure in Your Digital Identity

We’ve all seen that one button. The simple, and straightforward one that’s on most login and sign up pages on almost every login page today. “Continue with Google”It just works. It’s fast, and it’s convenient. But am I the only one who wonders “what ...

3d ago12 min read

OKOnkar Konkark.hashnode.dev

Session Based Auth System [state-full]

Session based auth is traditional method of auth and it is state-full means we store sessions of user in memory or DB and share session_id to user to verity his identity This method is gold standard

4d ago2 min read

RGRitik Guptaritikgupta913.hashnode.dev

How to Manage Multiple GitHub Accounts on the Same Laptop (Without Authentication Errors)

If you are a developer like me, you probably have: One personal GitHub account One work GitHub account Maybe another client account And then one day… you try to push work code , But it gets pushed from your personal account. Or worse: Permission...

4d ago3 min read

SSShaan Sauravshaanstack.hashnode.dev

Designing a Secure Code Execution Engine with Node.js and Docker

🧩 Introduction As a Computer Science student, I always wondered how platforms like LeetCode and HackerRank execute user-submitted code securely. So I decided to build my own online code compiler — a web-based platform where users can: Write code in...

5d ago3 min read

ARAniketh Roy Chowdhuryconsolethesecretweapon.hashnode.dev

JWT Finally Made Sense to Me (After Breaking Production)

So I broke production yesterday. Not badly, just… everyone got logged out at 3 PM and I had no idea why. Turns out I had set JWT expiration to 1 hour when I thought I was setting it to 24 hours. Classic. But while debugging this mess, I actually lear...

5d ago6 min read

CBChirag Bhugrajacked.dev

Production Ready Auth with Better Auth

For a long time, we had to either pay a fortune for managed services (Clerk/Auth0) or wrestle with the absolute chaos that was maintaining your own auth sessions. But it’s 2026, and the ecosystem has finally matured. The stack I’m opting for this one...

6d ago4 min read

Search Hashnode