NNguyễn Việt Tùng·Apr 12Auth at the Boundary: Integrating Feide Identity via the BFFConnecting the BFF to Feide — Norway's government-issued identity provider for educational organisations. OAuth 2.0 + OIDC flow, the Token Handler pattern, and why cookie-based sessions beat tokens in the browser.18 min read·devpath-traveler.nguyenviettung.id.vn
NNguyễn Việt Tùng·Dec 15, 2025Implementing an OIDC Callback in PHP/Yii/HumHub (with Code Examples)A practical, end-to-end guide to handling OIDC redirects, token exchange, identity mapping, and secure session creation inside a Yii/HumHub app6 min read·devpath-traveler.nguyenviettung.id.vn
NNguyễn Việt Tùng·Dec 10, 2025Deep Dive: The User Authentication Flow in my implemented Web AppA step-by-step walkthrough of how the browser, IdP, Redis, HumHub, and CloudFront work together to authenticate a user in a real production system.6 min read·devpath-traveler.nguyenviettung.id.vn
NNguyễn Việt Tùng·Dec 9, 2025Architecture Overview of my implemented Web App Authentication SystemA high-level walkthrough of how the CSL web app authenticates users through a hybrid IdP + server-session design8 min read·devpath-traveler.nguyenviettung.id.vn
NNguyễn Việt Tùng·Dec 8, 2025Understanding OAuth2 & OpenID Connect (OIDC)A clear guide to how OAuth2 and OIDC work together to provide modern authentication and secure delegated access.11 min read·devpath-traveler.nguyenviettung.id.vn
