Tag feed

#openid-connect

91 posts6 followers

Explore Hashnode

Alternatives

Trending tags this week

KTKushagra Trivedikushagrablogs.hashnode.dev2d ago · 14 min read

Securing Apps: Password Hashing, RBAC, OAuth, and OpenID Connect

How does a website know who you are? When you type your email and password into a login form and hit enter, a surprisingly complex set of decisions happens in the background. The server checks your id

0

SSUPRABHATblog.suprabhat.siteJul 18 · 12 min read

Securing Apps: Password Hashing, RBAC, OAuth, and OpenID Connect

When you open your favorite app, whether it’s Instagram, Spotify, or your bank's portal, a hidden, complex security dance happens in milliseconds. The system verifies your identity, checks what you ar

0

AAbhinavlog.page0.devJul 6 · 4 min read

LAB #01 SSRF via OpenID dynamic client registration

Lab Overview This lab allows client applications to dynamically register themselves with the OAuth service via a dedicated registration endpoint. Some client-specific data is used in an unsafe way by

0

SPSaurabh Prajapatiblog.thitainfo.comJul 6 · 18 min read

Securing Web Apps: Password Hashing, RBAC, OAuth 2.0, and OpenID Connect Explained

Securing Web Apps: Password Hashing, RBAC, OAuth 2.0, and OpenID Connect Explained TL;DR: Authentication proves who you are; authorization decides what you can do. This article builds the complete se

0

KSKanishka Shashinodej.hashnode.devJul 2 · 8 min read

Securing Apps: Password Hashing, RBAC, OAuth, and OpenID Connect

Security is one of those things that's easy to bolt on badly and hard to retrofit well. Most applications end up needing to answer four separate questions: How do we store credentials safely? How do w

0

RARangga Aprilio Utamaaprilio.hashnode.devJun 6 · 5 min read

SSO Is More Than "Log In Once"

Single Sign-On is often summarized as "log in once and access many applications." That is correct, but incomplete. A real SSO system must also answer several security questions: Which application is

0

KBKunal Bhanuseopenidconnect.hashnode.devApr 29 · 4 min read

Understanding OAuth 2.0 and OpenID Connect by Building a Minimal System

Over the past few days, I set out to understand OAuth 2.0 and OpenID Connect (OIDC) beyond surface-level usage. Instead of relying on libraries, I tried to build a minimal version of the flow myself.

0

TATolani Akintayofreecodecamp.orgApr 27 · 16 min read

How to Set Up OpenID Connect (OIDC) in GitHub Actions for AWS

If you've been storing AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY as GitHub Secrets to deploy to AWS, you're not alone. It's the most common approach and it's also one of the biggest security risks i

0

SGShivam Goyalblog.shivam-goyal.siteApr 20 · 6 min read

Build Your Own OIDC Provider (Beginner to Advanced) with Node.js, Express, PostgreSQL, and oidc-provider

If you have ever used Google Login, GitHub Login, or "Sign in with X", you have used OpenID Connect (OIDC). In this guide, we will build a production-style OIDC Authorization Server, step by step, usi

0

NVNguyễn Việt Tùngdevpath-traveler.nguyenviettung.id.vnFeb 19 · 5 min read

Passwordless: What Worked, What Didn’t, What I’d Change

When designing a passwordless-first PWA architecture, the diagram looks elegant. In production, elegance collides with: Browser inconsistencies Institutional identity constraints Support tickets Device lifecycle chaos Monitoring blind spots Le...

0

#openid-connect

Search Hashnode

#openid-connect

Explore Hashnode

Trending tags this week

Securing Apps: Password Hashing, RBAC, OAuth, and OpenID Connect

Securing Apps: Password Hashing, RBAC, OAuth, and OpenID Connect

LAB #01 SSRF via OpenID dynamic client registration

Securing Web Apps: Password Hashing, RBAC, OAuth 2.0, and OpenID Connect Explained

Securing Apps: Password Hashing, RBAC, OAuth, and OpenID Connect

SSO Is More Than "Log In Once"

Understanding OAuth 2.0 and OpenID Connect by Building a Minimal System

How to Set Up OpenID Connect (OIDC) in GitHub Actions for AWS

Build Your Own OIDC Provider (Beginner to Advanced) with Node.js, Express, PostgreSQL, and oidc-provider

Passwordless: What Worked, What Didn’t, What I’d Change