A technical guide implementing OAuth 2.1 authorization for an MCP server, part two of a three-part series with practical code examples.
A technical guide to implementing the latest MCP Authorization specification for securing HTTP-based MCP servers, starting with building a compliant server using FastAPI.
Explores the challenges of delegating authority to AI agents due to fragmented user identities and ungoverned authorization systems in enterprises.
A guide to implementing authorization in Next.js applications using React Server Components, Server Actions, and the App Router.
A tutorial on implementing private/protected routes in React Router 7 to control user access based on authentication and authorization.
A developer shares lessons learned and pitfalls to avoid when implementing policy-based authorization in .NET applications.
A Django SaaS development update covering the debug toolbar, authorization, and email verification signals.
The author updates core pages like About, FAQ, and Home for the JourneyInbox SaaS app, focusing on UI layout and content.
Explains authentication and authorization concepts simply, using ATM analogy for beginners in full-stack development.
Explores a multi-tenancy security design pattern: external authentication with local authorization, using IDP tokens and SAGA for signup.
A tutorial on implementing API Key authentication in ASP.NET Core for server-to-server communication, including code examples.
A talk on implementing flexible, permission-based authorization in ASP.NET Core to overcome limitations of traditional role/claim-based systems.
A developer's perspective on the challenges of implementing authorization (authz) in software, balancing minimal effort with security needs.
Announcing django-denied, a Django package that enforces authorization by denying all views by default for enhanced security.
The author creates a new open-source Django package called 'django-denied' for handling authorization, extracted from a SaaS project.
A comprehensive guide to implementing OAuth 2.0 authorization with multiple providers (Google, GitHub, Amazon) in a Node.js backend using Passport.js.
A comprehensive guide to all OAuth 2.0 grant types, explaining their flows and use cases for secure application authorization.
Jakarta Security 3's major update introduces OpenID Connect authentication, alongside its core API and underlying SPIs for Jakarta EE.
A technical guide explaining how to implement authentication and authorization in any backend language or framework, covering user models, signup/login routes, and session vs JWT auth.
A guide to implementing the OAuth 2.0 PKCE authorization flow for secure access in single-page and mobile applications.
