Tag feed

#openid-connect

86 posts6 followers

Explore Hashnode

Alternatives

Trending tags this week

RARangga Aprilio Utamaaprilio.hashnode.devJun 6 · 5 min read

SSO Is More Than "Log In Once"

Single Sign-On is often summarized as "log in once and access many applications." That is correct, but incomplete. A real SSO system must also answer several security questions: Which application is

0

KBKunal Bhanuseopenidconnect.hashnode.devApr 29 · 4 min read

Understanding OAuth 2.0 and OpenID Connect by Building a Minimal System

Over the past few days, I set out to understand OAuth 2.0 and OpenID Connect (OIDC) beyond surface-level usage. Instead of relying on libraries, I tried to build a minimal version of the flow myself.

0

TATolani Akintayofreecodecamp.orgApr 27 · 16 min read

How to Set Up OpenID Connect (OIDC) in GitHub Actions for AWS

If you've been storing AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY as GitHub Secrets to deploy to AWS, you're not alone. It's the most common approach and it's also one of the biggest security risks i

0

SGShivam Goyalblog.shivam-goyal.siteApr 20 · 6 min read

Build Your Own OIDC Provider (Beginner to Advanced) with Node.js, Express, PostgreSQL, and oidc-provider

If you have ever used Google Login, GitHub Login, or "Sign in with X", you have used OpenID Connect (OIDC). In this guide, we will build a production-style OIDC Authorization Server, step by step, usi

0

NVNguyễn Việt Tùngdevpath-traveler.nguyenviettung.id.vnFeb 19 · 5 min read

Passwordless: What Worked, What Didn’t, What I’d Change

When designing a passwordless-first PWA architecture, the diagram looks elegant. In production, elegance collides with: Browser inconsistencies Institutional identity constraints Support tickets Device lifecycle chaos Monitoring blind spots Le...

0

NVNguyễn Việt Tùngdevpath-traveler.nguyenviettung.id.vnFeb 19 · 5 min read

Why Passwordless Alone Is Not an Identity Strategy

When teams adopt WebAuthn or FIDO2, the excitement is understandable: No passwords. No phishing. No credential stuffing. Biometric UX. Public-key cryptography. It feels like the final answer. But WebAuthn answers exactly one question: Can thi...

0

NVNguyễn Việt Tùngdevpath-traveler.nguyenviettung.id.vnFeb 18 · 6 min read

Integrating OIDC (Feide) as Fallback and Recovery

WebAuthn gave us phishing-resistant, device-bound authentication.But devices get lost. Browsers reset. Users switch laptops. Institutions manage identities centrally. That’s where OIDC (Feide) enters — not as a competitor to passwordless, but as stru...

0

NVNguyễn Việt Tùngdevpath-traveler.nguyenviettung.id.vnFeb 16 · 6 min read

Passwordless PWA Flow Architecture Walkthrough

Modern authentication diagrams are clean. Real systems are not. My architecture intentionally combines: WebAuthn (FIDO2) for phishing-resistant authentication Feide (OIDC) for federated identity, recovery, and bootstrap SQL Server for credential p...

0

NVNguyễn Việt Tùngdevpath-traveler.nguyenviettung.id.vnFeb 15 · 6 min read

UX and Failure Are Part of the Security Model

Security engineers love cryptography because it is clean. Humans are not. The strongest authentication protocol in the world can be undone by: a confusing error message, an unclear retry flow, a missing recovery path, or a user who simply wants t...

0

NVNguyễn Việt Tùngdevpath-traveler.nguyenviettung.id.vnFeb 14 · 6 min read

Designing a Passwordless-First PWA Architecture

By this point in the series, we’ve established three things: Passwords are structurally fragile. WebAuthn provides phishing-resistant, device-bound authentication. OpenID Connect provides portable, federated identity. Now comes the harder questi...

0

#openid-connect

Search Hashnode

#openid-connect

Explore Hashnode

Trending tags this week

SSO Is More Than "Log In Once"

Understanding OAuth 2.0 and OpenID Connect by Building a Minimal System

How to Set Up OpenID Connect (OIDC) in GitHub Actions for AWS

Build Your Own OIDC Provider (Beginner to Advanced) with Node.js, Express, PostgreSQL, and oidc-provider

Passwordless: What Worked, What Didn’t, What I’d Change

Why Passwordless Alone Is Not an Identity Strategy

Integrating OIDC (Feide) as Fallback and Recovery

Passwordless PWA Flow Architecture Walkthrough

UX and Failure Are Part of the Security Model

Designing a Passwordless-First PWA Architecture