Install
Auth, Identity & Sessions
OAuth/OIDC, sessions, JWTs, SSO patterns, and security considerations.
- 8 Tracked terms
- Last 30 days Feed window
What this topic collects on
An article joins this feed when it matches these terms. Each one is also a search of its own.
Related topics
Latest in Auth, Identity & Sessions
Beyond the Password Wall: Redesigning Authentication Friction for Modern Users
41+ min ago (30+ words) For long we have treated authentication as a security gate rather than a critical touchpoint in the user journey. When …...
Patient Portal OAuth Login: Explicit Consent and Refresh Token Rotation in Node.js
15+ hour, 35+ min ago (360+ words) For a migration off a managed provider, I would first model the boundary, then run one narrow flow in parallel. Do not move every callback and database record in one release. Account continuity matters more than shaving a day from…...
How to Set Up Auth0 Organizations (SSO, Branding & Invitations)
1+ day, 16+ hour ago (298+ words) Stop Building Multi-Tenant Auth from Scratch. Use This Instead. Building a B2B SaaS application requires a complex multi-tenant infrastructure. In this technical walkthrough, Shreya Gupta and Lily Wisecarver demonstrate how to use Auth0 Organizations to effortlessly manage identity workflows for your business…...
1Password Setup: Passkeys & SSH Agent in 13 Steps [2026]
2+ day, 3+ hour ago (815+ words) You don’t need much to follow along, but a few version and account details matter given how fast 1Password has been shipping this year. If you’re migrating from another manager, keep your old vault unlocked and exportable until step 11 — don’t delete…...
JWT vs Session Tokens in Spring Boot: A Senior Dev’s Decision Guide
2+ day, 33+ min ago (34+ words) A practical decision guide on choosing between JWT and session tokens in Spring Boot. Three years ago I gave the same answer …...
Expo + Supabase GitHub Auth Broke 3 Times — Here's the Fix
3+ day, 54+ min ago (891+ words) TL;DR: GitHub login in my Expo app broke three separate times. A deep link that went nowhere. A PKCE flow I wired backwards. A redirect URL with a typo. Each fix is copy-pasteable below. Total auth code is under…...
Secure Your.NET API in 15 Minutes: JWT Authentication Tutorial
2+ day, 22+ hour ago (33+ words) If your API is public by default, you don’t have an API. You have a data leak waiting to happen.” You don’t need …...
JWT Internals: What’s Actually Inside That Token You Trust
3+ day, 16+ hour ago (268+ words) Explore what's really inside a JWT: how the header, payload, and signature work together, get verified, and where security pitfalls often hide....
JWT Exploits: Three Ways Trust Gets Misconfigured
3+ day, 17+ hour ago (714+ words) Discover three real-world JWT vulnerabilities caused by misconfigured trust, alg confusion, weak secrets, and none algorithm abuse, and how to prevent them....
Silent HMAC Key Contamination: Uncovering a Logic Flaw in Burp's JWT Editor Extension
5+ day, 14+ hour ago (1776+ words) JWT Editor was shortlisted for “Best Auth & Access Control” in PortSwigger’s 2026 Burp Suite Extension Awards. This is the story of finding a silent bug inside it. Usually, when something goes wrong, your first instinct is to look at yourself. What…...