Social Media Ideas for Oauth 2.0

Understanding OAuth 2.0 for Backend Developers

Modern applications rarely operate in isolation. Whether we are building a web app, mobile backend, or microservices architecture, our system often needs to access user data stored...

Авторизация по протоколу OAuth 2.0 в интеграциях

В интеграциях с внешними приложениями часто используется протокол OAuth 2.0. В этой статье разбирается практический сценарий: получение access_token, обновление токена, работа с ош...

OBO SSO in Java Applications: Securely Calling Downstream APIs on Behalf of a User

Modern enterprise applications rarely operate in isolation. A user may authenticate through a web or mobile application, invoke a Java-based backend API, and that backend may need...

OAuth 2.0, LDAP, and HTTP auth for Amazon MQ for RabbitMQ

Amazon MQ for RabbitMQ supports OAuth 2.0, LDAP, and HTTP-based authentication backends so you can connect your broker to the identity infrastructure you already use. This post exp...

Introducing OAuth Support for AWS MCP Server

AWS MCP Server using the same credentials and sign-in methods that you already use for connecting to the AWS Management Console or AWS Command Line Interface (AWS CLI) through a fa...

redb.Identity: OAuth 2.1 / OpenID сервер на .NET, где протокол отделён от транспорта, по шине или вообще без сети

Есть три привычных способа сделать OAuth/OIDC в .NET, и каждый чем-то неудобен.Первый — ASP.NET-привязанные решения (Duende IdentityServer, ASP.NET Identity, сэмплы OpenIddict). Мо...

IAM authentication with OAuth 2.0 for Amazon MQ for RabbitMQ

IAM authentication with OAuth 2.0 lets clients connect to Amazon MQ for RabbitMQ using their existing IAM identity instead of static broker-local credentials. This post covers the...

How to Secure an MCP Server with OAuth 2.1, Scoped Access, and Audit Logging

<figure data-wp-context="{"imageId":"6a5e0b1f50a90"}" data-wp-interactive="core/image" data-wp-key="6a5e0b1f50a90&qu...

Spring Dynamic Authorization Scopes Example

Modern enterprise applications often require fine-grained access control where different users, clients, and business scenarios need different levels of permissions. OAuth 2.0 scop...

Implement on-behalf-of token exchange for multi-tenant agents with Amazon Bedrock AgentCore Gateway

Building multi-tenant agents with Amazon Bedrock AgentCore and Apply fine-grained access control with Bedrock AgentCore Gateway interceptors establish the conceptual foundation for...

Secure Foundations: Protecting Loyalty Data with RESTful APIs and OAuth 2.0

When you log into your digital bank account or swipe a credit card, you expect your financial data to be locked behind digital vault doors…Continue reading on Medium »

User Guide for Magento 2 Zoho SSO

Magento 2 Zoho SSO allows customers to sign in to Magento 2 using their Zoho account through a secure OAuth/OpenID Connect flow. Instead of creating and remembering a separate Mage...

OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials

At least two distinct threat actors are weaponizing a novel evasion technique called OAuth client ID spoofing in cloud campaigns, while slipping past telemetry. The activity allow...

Future-Proofing JWT Security: Crypto-Agility, Post-Quantum Signatures, and IAM Migration

Today, applications are built around identity systems. All API gateways, microservices, mobile backends, and single sign-on flows require some form of authentication and authorizat...

SMS, chamada de voz ou app: como escolher o método de 2FA certo pro seu produto

Toda vez que alguém pergunta "qual método de autenticação em duas etapas eu devo usar", a resposta padrão que circula por aí é "TOTP é mais seguro, use sempre". Tecnicamente corret...

SecretAuth – UX-решение для авторизации посредством приватного ключа

Мир сильно изменился с начала 21 века. В том числе, что касается систем авторизации. Мы продвинулись от авторизации через обычный логин и пароль к использованию централизованных се...

[Sponsor] WorkOS MCP: Manage Your Auth Platform From Any AI Agent

Debugging SSO, managing users, adjusting auth policies, configuring branding: every configuration task has lived behind a UI that only a human can drive. The WorkOS MCP server giv...

Spring Security: дополнение к JWT токенам

Всех приветствую!Данная статья будет посвящена довольно важным вещам, таким как: refreshtoken, метод-уровневой безопасности и примеру реализации правила "свой/чужой профиль" Читать...

Two Factor Authentication (2FA)

Почему кнопка «Войти через VK» заняла три дня. Кейс

На первый взгляд, Social Login — одна из самых простых функций современного веб-приложения.Добавить кнопку «Войти через VK». Добавить кнопку «Войти через Яндекс». OAuth 2.0 давно с...

Secure Omnissa Horizon with Microsoft Entra ID 2FA

<p><a rel="nofollow" href="https://nolabnoparty.com/en/secure-omnissa-horizon-with-microsoft-entra-id-2fa/">Secure Omnissa Horizon with Microsoft En...

Novel OAuth Client ID Spoofing Technique Targets Cloud Environments

New research reveals cyber-attackers can spoof OAuth Client IDs in Microsoft Entra ID, creating a stealthy path into cloud environments

Role-Based Access Control in Node.js with JWT

Role-Based Access Control (RBAC) is a fundamental security pattern used to restrict system access based on user roles. When combined with JSON Web Tokens (JWT), it enables stateles...

Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens

The commercial phishing-as-a-service (PhaaS) toolkit known as Greatness has become the latest crimeware solution to add support for device code phishing, a rapidly growing cyber th...