Kkamal aboueidOct 8 · 6 min readDemystifying OAuth 2.0 and OpenID ConnectWhen developers implement features like "Sign in with Google", they often encounter a set of confusing terms: Client ID, Client Secret , Authorization Code, Access Token, and ID Token To understand wh3kamalaboueid.hashnode.dev
SSatyajit MishraOct 7 · 8 min readSpring Security Explained: Understanding Authentication, JWT, and OAuth2 from the Inside OutSpring Security Explained: What Really Happens Behind Every Login Request? When I first started learning Spring Security, I was overwhelmed by terms like Security Filter Chain, Authentication Manager,blogs.satyajitmishra.me
AAyush JainSep 19 · 44 min readSecuring Apps: Password Hashing, RBAC, OAuth, and OpenID ConnectIt is 11 at night. Dinner is done, lights are off, and I am in bed with my MacBook Air propped up and my Crinacle Zero 2 IEMs plugged straight into the 3.5mm jack. Netflix is open, The East Palace is 12Mayushjjainn.hashnode.dev
Sshubhu1953Sep 12 · 6 min readOAuth 2.0 Grant Types in Azure: Which to Use, and Which Are DeadPart 3 of 6 in the Entra ID Authentication: A Field Guide series. Five OAuth flows matter in Azure and two are actively harmful. Which ones you reach for says a lot about whether you learned OAuth in shubhankarsarkar.hashnode.dev
VVed PandeyAug 21 · 17 min readMaster Application SecurityEver thought How does a website remembers you? Why do we hash password? if simple password login was working, then what was the need of OAuth or OIDC (OpenID Connect)? Why roles exists? Today, we are 1vedpandeydev.hashnode.dev
RrathsaraAug 14 · 31 min readUnderstanding OAuth 2.0: Delegation, Grant Types, and the Attacks That Actually HappenThe first time I heard the term OAuth, I didn't know what it meant. I was in a conversation with a DBA lead about something adjacent to authentication and authorization, and he mentioned, almost in parr-cyber.hashnode.dev
NNeelAug 8 · 5 min readGoHighLevel API v1 vs v2: A Developer's Migration GuideIf you're maintaining or building on top of GoHighLevel, this is the technical breakdown you actually need — not marketing copy, just what's different under the hood and how to migrate safely. If you'ghlexpert.hashnode.dev
RrathsaraAug 6 · 15 min readIdentity Foundations: Everything Before OAuthBefore any protocol makes sense on its own terms, a few things underneath it need to be settled first: what authentication and authorization actually are as distinct concepts, how identity gets carrie13Nrr-cyber.hashnode.dev
SSachin NandanwarAug 3 · 11 min readBuild AI Agents with Microsoft Agent Framework to Access Azure Services Using Entra OAuthImagine a scenario where you have an AI agent that needs to access Azure services, such as Azure Storage. Simply granting the agent open and unrestricted access to Azure resources is not an option. Do1azureguru.net
SSachin NandanwarJul 20 · 11 min read A simple guide to securing Azure Storage in ASP.NET Core Minimal API's with Microsoft Entra ID and OpenID Connect (OIDC)In this article, we'll take a deep dive into securing an ASP.NET Core Minimal API with Microsoft Entra ID and using it to access Azure ADLS Gen2 storage implementing Microsoft Entra ID for user sign-i43ESazureguru.net