Rrathsarainrr-cyber.hashnode.dev·1d ago · 15 min readIdentity Foundations: Everything Before OAuthBefore any protocol makes sense on its own terms, a few things underneath it need to be settled first: what authentication and authorization actually are as distinct concepts, how identity gets carrie00
AKAshutosh Krishnainfreecodecamp.org·1d ago · 45 min readCSRF from Scratch: Browser Mechanics, Attacks, and Spring Security Implementation [Full Handbook]If you've ever built a web application or configured Spring Security, you've almost certainly encountered Cross-Site Request Forgery (CSRF). In my previous guide, How OAuth 2.0 Works: A Practical Guid00
MHMuiz Harunaindevdesiignn.hashnode.dev·3d ago · 4 min readWeb Security: Understanding JWTJWT: JSON Web Token JWT is a standard for safely passing claims, pieces of information or assertions made about a subject, in a space-constrained environment. Its key features are compactness, simplic10
SSshouvik sarkarinsarkarshouvik.hashnode.dev·3d ago · 12 min readJWT Authentication ExplainedHey there brilliant developers. Hope you’re learning and building something new every day. Did you know that HTTP is stateless? Since Express is built on top of HTTP, it is stateless too. But what doe00
YPYogeshwar Peelainexploitnotes.hashnode.dev·4d ago · 6 min readTryHackMe : Towel on the Sunbed WriteupTL;DR Ponzi Portfolio is a Node.js/Express "staking rewards" web app with a 24-hour cooldown on claiming a reward. The /claim endpoint has a classic check-then-act race condition: it checks whether th10
ATAnakin Techinanakinwriters.hashnode.dev·3d ago · 7 min readLogin Automation Fails When the Session Becomes the AccountA password is not an account, and cookies are not a login. Systems that blur those facts usually work in the demo, then fail when the same customer has two accounts on one portal, a password rotates i00
CConnectedResearchersinconnectedresearchers.hashnode.dev·3d ago · 8 min readEmail Aliases Are an Identity-Layer Bug, Not a String-Validation ProblemMost account databases impose a unique constraint on an email string and call the problem solved. Some implementations lowercase the value first. Others add special handling for Gmail dots and +tags. 00
SMSiddhartha Mohapatrainnode-introduction.hashnode.dev·4d ago · 6 min readWhat is Middleware in Express and How Does It Work?Middleware functions are building blocks of an application that are executed during the request-response cycle, sitting between the incoming request and the response. Executes custom logic for each r00
VVikaskumarinvikaskumarpandey.hashnode.dev·5d ago · 14 min read⚡Salesforce Integration Deep Dive: API vs Web Service, Integration Types & Authentication vs Authorization📋 Table of Contents API vs Web Service — Understanding the Difference Real-World Example: Salesforce Calls SAP Web Service Types of Integration in Salesforce Easy Way to Remember: Integration, AP10
KBKartik Budhlakotiinkartikbudhlakoti.hashnode.dev·5d ago · 4 min readMonth 5: Working Was Not the Same as CorrectMonth 5 was quieter than Month 4 on the surface. Fewer commits, less obvious progress. But this month taught me two things I only found because I stopped trusting the first signal that said everything00
