Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Why OAuth2 and OIDC Might Be Failing Modern Backend Authentication (And What’s Next)
════════════════════════
𐀪 Author: Kanha
════════════════════════
ⴵ Time: Sun, 18 May 2025 06:24:04 GMT
════════════════════════
⌗ Tags: #oauth2 #api_security #openid_connect #technology #authentication
Medium
Why OAuth2 and OIDC Might Be Failing Modern Backend Authentication (And What’s Next) 🔐
As backend systems scale and threats evolve, it’s time to question whether today’s go-to standards — OAuth2 and OIDC — are still up to the…
41 views
Daily Writeups
⤷ Title: OpenID Connect vs OAuth2 — Entenda a Diferença com Profundidade
════════════════════════
𐀪 Author: Guilherme Neto
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 16:28:03 GMT
════════════════════════
⌗ Tags: #openid_connect #oauth2 #api_security #authentication #authorization
Medium
OpenID Connect vs OAuth2 — Entenda a Diferença com Profundidade
🔐 OAuth2 e OpenID Connect (OIDC) não são a mesma coisa — e confundir isso pode comprometer a segurança da sua aplicação.
53 views
Daily Writeups
⤷ Title: OAuth vs OpenID Connect: Bu İkisini Neden Hep Karıştırıyoruz?
════════════════════════
𐀪 Author: Anıl Akdemir
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 13:22:12 GMT
════════════════════════
⌗ Tags: #identity_management #openid_connect #authentication #api_security #oauth
Medium
OAuth vs OpenID Connect: Bu İkisini Neden Hep Karıştırıyoruz?
Eğer bir noktada “OAuth ile giriş yap” ya da “OpenID Connect destekliyoruz” gibi cümleler gördüysen ve “İkisi de login olayı değil mi ya?”…
61 views
Daily Writeups
⤷ Title: Say Goodbye to Password Fatigue: OpenID Authentication Explained
════════════════════════
𐀪 Author: Dennis Peter Munyao
════════════════════════
ⴵ Time: Fri, 15 Aug 2025 12:05:41 GMT
════════════════════════
⌗ Tags: #web_security #authentication #openid #sso #api_security
Medium
Say Goodbye to Password Fatigue: OpenID Authentication Explained
In today’s interconnected digital landscape, managing user authentication across multiple applications and services has become increasingly…
44 views
Daily Writeups
⤷ Title: OAuth 2.0 vs OpenID Connect (OIDC): Best Practices & Security in 2025
════════════════════════
𐀪 Author: QuarkAndCode
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 09:24:49 GMT
════════════════════════
⌗ Tags: #api_security #oauth_2_1 #openid_connect #pkce #oauth_2_0
Medium
OAuth 2.0 vs OpenID Connect (OIDC): Best Practices & Security in 2025
OAuth 2.0 and OIDC in 2025: choose the Authorization Code + PKCE, secure tokens with DPoP/mTLS, rotate refresh tokens, and follow OAuth…
54 views
Daily Writeups
⤷ Title: FastAPI + OpenID Connect with PKCE: Secure Mobile & CLI Auth Without SDK Hell
════════════════════════
𐀪 Author: Yamishift
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 01:32:13 GMT
════════════════════════
⌗ Tags: #fastapi #oauth2 #openid #python #api_security
Medium
FastAPI + OpenID Connect with PKCE: Secure Mobile & CLI Auth Without SDK Hell
Use standards, not black-box SDKs, to give your apps and CLIs clean, secure single sign-on.
32 views
Daily Writeups
⤷ Title: Solving OIDC Integration Challenges with Kong API Gateway and Angular UI
════════════════════════
𐀪 Author: Amanuel Eshete
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 22:48:41 GMT
════════════════════════
⌗ Tags: #kong_api_gateway #api_security #openid_connect #microservices #angular
Medium
Solving OIDC Integration Challenges with Kong API Gateway and Angular UI
Integrating OpenID Connect (OIDC) into a microservices platform can feel straightforward — until subtle issues put your UI, APIs, and…
26 views
Daily Writeups
⤷ Title: Broken Keys: Critical Authlib Flaws Expose Millions to JWT Forgery and Padding Oracles
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 12:02:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authlib #CVE_2026_27962 #CVE_2026_28490 #CVE_2026_28498 #cybersecurity #JWT Security #OAuth #OpenID Connect #Padding Oracle #Python Security
Daily CyberSecurity
Broken Keys: Critical Authlib Flaws Expose Millions to JWT Forgery and Padding Oracles
Three critical flaws in Authlib (including CVSS 9.1 CVE-2026-27962) allow JWT forgery and padding oracle attacks. Update to version 1.6.9 immediately.
18 views
Daily Writeups
⤷ Title: OAuth 2.0 & OIDC — How modern authentication actually works under the hood
════════════════════════
𐀪 Author: Reuben Lim
════════════════════════
ⴵ Time: Wed, 06 May 2026 17:17:15 GMT
════════════════════════
⌗ Tags: #authentication #oauth2 #openid_connect #application_security #web_development
Medium
OAuth 2.0 & OIDC — How modern authentication actually works under the hood
I once spent three hours debugging an authentication flow where a client was sending the client_secret in the URL query parameters. It…
9 views
Daily Writeups
⤷ Title: Why third-party apps never need your password — OAuth, OpenID Connect, and SSO explained
════════════════════════
𐀪 Author: Dhruv Thakur
════════════════════════
ⴵ Time: Fri, 29 May 2026 04:03:13 GMT
════════════════════════
⌗ Tags: #openid_connect #sso #aml #api_security #oauth
Medium
Why third-party apps never need your password — OAuth, OpenID Connect, and SSO explained
When you click “Sign in with Google” on some app you just downloaded, something interesting happens. The app gets access to your data. Your…
26 views