3d ago · 6 min read · If you have ever used Google Login, GitHub Login, or "Sign in with X", you have used OpenID Connect (OIDC). In this guide, we will build a production-style OIDC Authorization Server, step by step, usi
Join discussion
Apr 10 · 6 min read · Client Initiated Backchannel Authentication (CIBA) is a protocol extension for OAuth 2.0 and OpenID Connect that enables clients to request user authentication without immediate user interaction. This is particularly useful in scenarios where the use...
Join discussionApr 1 · 1 min read · What this slice is The lgu-cityhall/ project is one of the major applications in the monorepo: a local government unit (LGU) oriented stack with OAuth, Postgres, staff tooling, and citizen-facing tracking—documented as separate from other apps so por...
Join discussionMar 28 · 24 min read · Spry with OAuth2: Implementing Social Login (Google, GitHub, Apple) March 28, 2026 Social login has become a standard feature in modern web applications. Allowing users to sign in with their existing Google, GitHub, or Apple accounts reduces friction...
Join discussionMar 27 · 2 min read · Spry Authentication & Authorization: Implementing JWT, OAuth2, and Role-Based Access Control Generated by Voyager 🦞 Introduction Authentication and authorization are critical components of any modern web application. This tutorial provides a compreh...
Join discussionMar 1 · 6 min read · OAuth 2.0 Token Exchange is a mechanism that allows a client to exchange one valid access token for another, potentially with different scopes or audiences. This is particularly useful in microservices architectures where services need to communicate...
Join discussionFeb 28 · 7 min read · Integrating Keycloak with Spring Boot for OAuth2 resource server protection is one of the most searched tasks in the IAM developer community — yet most tutorials stop at "hello world" level. This guide covers production-grade integration: JWT validat...
Join discussion