Rrathsarainrr-cyber.hashnode.dev·7m ago · 15 min readIdentity Foundations: Everything Before OAuthBefore any protocol makes sense on its own terms, a few things underneath it need to be settled first: what authentication and authorization actually are as distinct concepts, how identity gets carrie00
SNSachin Nandanwarinazureguru.net·3d ago · 11 min readBuild AI Agents with Microsoft Agent Framework to Access Azure Services Using Entra OAuthImagine a scenario where you have an AI agent that needs to access Azure services, such as Azure Storage. Simply granting the agent open and unrestricted access to Azure resources is not an option. Do10
SNSachin Nandanwarinazureguru.net·Jul 20 · 11 min read A simple guide to securing Azure Storage in ASP.NET Core Minimal API's with Microsoft Entra ID and OpenID Connect (OIDC)In this article, we'll take a deep dive into securing an ASP.NET Core Minimal API with Microsoft Entra ID and using it to access Azure ADLS Gen2 storage implementing Microsoft Entra ID for user sign-i33EI
RGRitik Guptainritikgupta913.hashnode.dev·Jul 16 · 7 min readWhy I Stopped Using Passport.js for OAuth (And Built My Own Authentication Flow)TL;DR: Passport.js is a great authentication middleware, especially for server-rendered applications. But when building modern applications with a React frontend, React Native mobile app, and a shared00
MHMuiz Harunaindevdesiignn.hashnode.dev·Jul 7 · 11 min readWeb Security: OAuth 2.0 and OpenID Connect (OIDC)OAuth 2.0: Open Authorization In the past, sharing information between services was often done by sharing login credentials with the other service, trusting that service to protect the credentials and10
GBGiliam Breemsinapexstuff.hashnode.dev·Jun 19 · 6 min readGenerating a bearer token with Curl using Oracle ORDS and the OAuth 2.0 Client Credentials flowIn this blog I cover the manual steps to resolve a valid bearer token from the OAuth Authentication Server that comes out-of-the-box with Oracle ORDS, a.k.a. Oracle REST Data Services. Nevertheless, t00
RARangga Aprilio Utamainaprilio.hashnode.dev·Jun 6 · 5 min readSSO Is More Than "Log In Once"Single Sign-On is often summarized as "log in once and access many applications." That is correct, but incomplete. A real SSO system must also answer several security questions: Which application is 00
PSprashant singhingrasshopper.hashnode.dev·Jun 3 · 2 min readJWT Demystified Intro: If you have ever integrated Spring Security, worked with Keycloak, or built microservices with OAuth 2.0 — you have used JWTs. But most developers treat them as a black box. They copy the confi00
Hholistisinlongevityai.hashnode.dev·Jun 1 · 2 min readThree free wearable integrations for an AI health report: Oura, Withings, PolarLive today: three wearables, free to connect From today users can connect their Oura Ring, Withings device or Polar watch to their longevity health report at longevityai.nl. Free, in 30 seconds, via d00
OKOm Kanseinomkanse.hashnode.dev·May 31 · 5 min readSecure Android Authentication with OAuth2/OIDC, PKCE, and Android KeyStoreWhy This Article Exists When I started building the authentication system for a fintech Android application, I quickly realized that most tutorials stop at the happy path — get an access token, store 00