Tag feed

#oauth

400 posts29 followers

Explore Hashnode

Alternatives

Trending tags this week

DCDespia CEOblog.despia.com5h ago · 24 min read

Web App Apple Login (Native Sign-In)

Whatever your web app is built with, plain HTML and JavaScript included, shipping it to iOS with Google or any social login triggers Guideline 4.8: you must offer an equivalent privacy-focused login n

0

SSUPRABHATblog.suprabhat.site20h ago · 12 min read

Securing Apps: Password Hashing, RBAC, OAuth, and OpenID Connect

When you open your favorite app, whether it’s Instagram, Spotify, or your bank's portal, a hidden, complex security dance happens in milliseconds. The system verifies your identity, checks what you ar

0

RMRenukashree Muraliquietbytes.hashnode.dev1d ago · 4 min read

JWT Attack Lab — Part 6: Spoofing the JWKS URL an RSA Verifier Trusts

Part 6 of a series building a Flask API with JWT authentication, then deliberately exploiting six real vulnerabilities in it. Part 5 exploited kid to point a local file lookup somewhere unintended. Th

0

AAbhinavlog.page0.dev5d ago · 2 min read

LAB#03 OAuth account hijacking via redirect_uri

Lab Overview This lab uses an OAuth service to allow users to log in with their social media account. A misconfiguration by the OAuth provider makes it possible for an attacker to steal authorization

0

LTLưu Tuấn Anhblog.fiscybersec.com5d ago · 15 min read

ToddyCat and Umbrij: When OAuth Becomes the New Target of APT Campaigns

Overview The recent campaign recorded by the APT ToddyCat group targets businesses using the Google Workspace (Gmail) email service. By using a specialized tool called Umbrij, attackers do not try to

0

JBJameson Brandonroyalplugins.hashnode.devJul 12 · 6 min read

Security Researchers Flagged My Plugin Twice. Here's Why It Wasn't Scary.

I have had two independent security researchers find bugs in my WordPress plugin this year. Both were valid. Both got fixed. I would gladly take another one tomorrow. If that sounds like a strange thi

0

AAbhinavlog.page0.devJul 8 · 3 min read

LAB #02 Forced OAuth profile linking

Lab Overview This lab gives you the option to attach a social media profile to your account so that you can log in via OAuth instead of using the normal username and password. Due to the insecure impl

0

BBiztechpulsehubbiztechpulsehub.hashnode.devJul 8 · 2 min read

How to Fix Salesforce OAuth Flow Validation Stalls Cleanly

Hey devs, debugging complex cloud authentication sequences smoothly requires highly stable remote token transmission paths. Modern enterprise application infrastructure environments utilize secure web

0

MHMuiz Harunadevdesiignn.hashnode.devJul 7 · 11 min read

Web Security: OAuth 2.0 and OpenID Connect (OIDC)

OAuth 2.0: Open Authorization In the past, sharing information between services was often done by sharing login credentials with the other service, trusting that service to protect the credentials and

0

AAbhinavlog.page0.devJul 6 · 4 min read

LAB #01 SSRF via OpenID dynamic client registration

Lab Overview This lab allows client applications to dynamically register themselves with the OAuth service via a dedicated registration endpoint. Some client-specific data is used in an unsafe way by

0

#oauth

Search Hashnode

#oauth

Explore Hashnode

Trending tags this week

Web App Apple Login (Native Sign-In)

Securing Apps: Password Hashing, RBAC, OAuth, and OpenID Connect

JWT Attack Lab — Part 6: Spoofing the JWKS URL an RSA Verifier Trusts

LAB#03 OAuth account hijacking via redirect_uri

ToddyCat and Umbrij: When OAuth Becomes the New Target of APT Campaigns

Security Researchers Flagged My Plugin Twice. Here's Why It Wasn't Scary.

LAB #02 Forced OAuth profile linking

How to Fix Salesforce OAuth Flow Validation Stalls Cleanly

Web Security: OAuth 2.0 and OpenID Connect (OIDC)

LAB #01 SSRF via OpenID dynamic client registration