Resource Owner Password Credentials grant flow in Azure AD
Explains the OAuth Resource Owner Password Credentials (ROPC) grant flow in Azure AD, detailing its purpose and why it should be avoided in modern applications.
Explains the OAuth Resource Owner Password Credentials (ROPC) grant flow in Azure AD, detailing its purpose and why it should be avoided in modern applications.
Explains security risks of wildcard reply URLs in MSAL.js and demonstrates a safer alternative using session storage for post-login redirects.
A guide to simplifying React app authentication by conditionally rendering components based on user state.
Guide on configuring KSQL to connect to a secured Confluent Cloud Schema Registry, including Docker setup and error troubleshooting.
Analyzes technical and market challenges hindering widespread adoption of security keys, focusing on iOS limitations and API fragmentation.
A technical guide on configuring an Azure VM to authenticate with HashiCorp Vault using Azure AD, retrieving secrets via API.
Announcing a free book that teaches how to build a full-stack application using React and Firebase, from setup to deployment.
A technical guide on configuring HashiCorp Vault to authenticate using Azure Active Directory and Managed Service Identity.
Building an admin dashboard in Django, covering user authentication, view protection, and semi-automated backend tasks.
Explains how to implement OAuth and OpenID Connect authentication protocols in a Blazor client-side application.
Explains the impact of Safari's stricter same-site cookie policy on ASP.NET Core external authentication and proposes a solution.
Guide to fixing Google authentication in ASP.NET Core after Google+ API shutdown, using OpenID Connect as a replacement.
Analyzes the security concerns and evolving best practices for the OAuth2 implicit flow, especially for browser-based applications.
A visual guide to setting up a Firebase project and enabling email/password authentication for web applications.
Analysis of CVE-2018-1002105, a critical Kubernetes API server vulnerability allowing privilege escalation and arbitrary backend requests.
A tutorial on integrating Firebase backend services with a React Native application to build an MVP quickly.
A technical guide on implementing Azure AD single sign-out in ASP.NET Core applications, explaining configuration and the SameSite cookie requirement.
A tutorial on implementing token-based authentication in Django REST Framework for secure API user identification.
A beginner's guide to building a React application with Firebase for authentication and a realtime database.
A step-by-step tutorial on building a full-stack MERN application with user authentication and Material UI for the frontend.