Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Mon, 24 Apr 2023 11:32:42 GMT
———————————————
✏️Title: Identity Distribution is Essential for Modern API Security
———————————————
📎Link: https://medium.com/p/4ca41f40f4f2
———————————————
Tags: #oauth #security #openid_connect #api_security #api_development

Medium

Identity Distribution is Essential for Modern API Security

How to mitigate API security risks and implement proper identity distribution techniques

7 views12:01

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Wed, 02 Aug 2023 07:03:44 GMT
———————————————
✏️Title: What is Backend for Frontend (BFF) and How it protects your APIS
———————————————
📎Link: https://medium.com/p/39e315d3fc3d
———————————————
Tags: #frontend #security #api_security #openid_connect

Medium

What is Backend for Frontend (BFF) and How it protects your APIS

In recent years it has been common to implement OpenID Connect for SPAs solely in Javascript. This is no longer recommended, for two main…

17 views08:02

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Mon, 28 Aug 2023 21:30:48 GMT
———————————————
✏️Title: Demystifying OAuth 2.0 and OpenID Connect: A Deep Dive into Secure Authorization
———————————————
📎Link: https://medium.com/p/418f5ec7b8ac
———————————————
Tags: #cybersecurity #secure_authentication #oauth2 #openid_connect

Medium

Demystifying OAuth 2.0 and OpenID Connect: A Deep Dive into Secure Authorization

In an increasingly interconnected digital landscape, secure authorization has emerged as a critical pillar of cybersecurity.

10 views23:02

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Mon, 25 Sep 2023 21:45:36 GMT
———————————————
✏️Title: OAuth2 Token Exchange in Practice
———————————————
📎Link: https://medium.com/p/5a12a6d2e0d
———————————————
Tags: #identity_management #token_exchange #openid_connect #api_security #oauth2

Medium

OAuth2 Token Exchange in Practice

Over time, OAuth2 has evolved to meet increasingly complex security needs that go beyond the basic capabilities of a Security Token Service…

20 views02:02

Daily Writeups

⤷ Title: Apache mod_auth_openidc Vulnerability Exposes Protected Content
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 09 Apr 2025 00:10:44 +0000
════════════════════════
⌗ Tags: #Vulnerability #apache #Apache security #authentication #CVE_2025_31492 #cybersecurity #mod_auth_openidc #OpenID Connect #security advisory

Daily CyberSecurity

Apache mod_auth_openidc Vulnerability Exposes Protected Content

A security flaw in Apache's mod_auth_openidc module can expose protected web content to unauthenticated users. Patch or mitigate to secure your server

17 views02:04

Daily Writeups

⤷ Title: mTLS and OAuth2 — Certificate-Bound Tokens
════════════════════════
𐀪 Author: Sagara Gunathunga
════════════════════════
ⴵ Time: Sat, 26 Apr 2025 02:21:16 GMT
════════════════════════
⌗ Tags: #openid_connect #mtls_authentication #oauth2 #application_security #api_security

Medium

mTLS and OAuth2 — Certificate-Bound Tokens

In the previous post, we discussed the certificate-based mutual authentication process that takes place during the TLS handshake, and how…

37 views04:03

Daily Writeups

⤷ Title: Jenkins Plugin Flaws Expose Critical Risks: CVE-2025-47889 Hits 9.8 CVSS with Auth Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 16 May 2025 00:24:56 +0000
════════════════════════
⌗ Tags: #Vulnerability #Authentication Bypass #CI/CD security #CVE_2025_47884 #CVE_2025_47885 #CVE_2025_47889 #Jenkins vulnerabilities #OpenID Connect #plugin security #XSS

Daily CyberSecurity

Jenkins Plugin Flaws Expose Critical Risks: CVE-2025-47889 Hits 9.8 CVSS with Auth Bypass

Jenkins plugins hit by CVE-2025-47884 (CVSS 9.1) and more—flaws enable impersonation, XSS, and authentication bypass. Patch now to secure pipelines.

14 views10:06

Daily Writeups

⤷ Title: Why OAuth2 and OIDC Might Be Failing Modern Backend Authentication (And What’s Next)
════════════════════════
𐀪 Author: Kanha
════════════════════════
ⴵ Time: Sun, 18 May 2025 06:24:04 GMT
════════════════════════
⌗ Tags: #oauth2 #api_security #openid_connect #technology #authentication

Medium

Why OAuth2 and OIDC Might Be Failing Modern Backend Authentication (And What’s Next) 🔐

As backend systems scale and threats evolve, it’s time to question whether today’s go-to standards — OAuth2 and OIDC — are still up to the…

41 views08:05

Daily Writeups

⤷ Title: OpenID Connect vs OAuth2 — Entenda a Diferença com Profundidade
════════════════════════
𐀪 Author: Guilherme Neto
════════════════════════
ⴵ Time: Thu, 19 Jun 2025 16:28:03 GMT
════════════════════════
⌗ Tags: #openid_connect #oauth2 #api_security #authentication #authorization

Medium

OpenID Connect vs OAuth2 — Entenda a Diferença com Profundidade

🔐 OAuth2 e OpenID Connect (OIDC) não são a mesma coisa — e confundir isso pode comprometer a segurança da sua aplicação.

53 views17:04

Daily Writeups

⤷ Title: OAuth vs OpenID Connect: Bu İkisini Neden Hep Karıştırıyoruz?
════════════════════════
𐀪 Author: Anıl Akdemir
════════════════════════
ⴵ Time: Tue, 15 Jul 2025 13:22:12 GMT
════════════════════════
⌗ Tags: #identity_management #openid_connect #authentication #api_security #oauth

Medium

OAuth vs OpenID Connect: Bu İkisini Neden Hep Karıştırıyoruz?

Eğer bir noktada “OAuth ile giriş yap” ya da “OpenID Connect destekliyoruz” gibi cümleler gördüysen ve “İkisi de login olayı değil mi ya?”…

61 views15:05

Daily Writeups

⤷ Title: Say Goodbye to Password Fatigue: OpenID Authentication Explained
════════════════════════
𐀪 Author: Dennis Peter Munyao
════════════════════════
ⴵ Time: Fri, 15 Aug 2025 12:05:41 GMT
════════════════════════
⌗ Tags: #web_security #authentication #openid #sso #api_security

Medium

Say Goodbye to Password Fatigue: OpenID Authentication Explained

In today’s interconnected digital landscape, managing user authentication across multiple applications and services has become increasingly…

44 views14:05

Daily Writeups

⤷ Title: OAuth 2.0 vs OpenID Connect (OIDC): Best Practices & Security in 2025
════════════════════════
𐀪 Author: QuarkAndCode
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 09:24:49 GMT
════════════════════════
⌗ Tags: #api_security #oauth_2_1 #openid_connect #pkce #oauth_2_0

Medium

OAuth 2.0 vs OpenID Connect (OIDC): Best Practices & Security in 2025

OAuth 2.0 and OIDC in 2025: choose the Authorization Code + PKCE, secure tokens with DPoP/mTLS, rotate refresh tokens, and follow OAuth…

54 views10:05

Daily Writeups

⤷ Title: FastAPI + OpenID Connect with PKCE: Secure Mobile & CLI Auth Without SDK Hell
════════════════════════
𐀪 Author: Yamishift
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 01:32:13 GMT
════════════════════════
⌗ Tags: #fastapi #oauth2 #openid #python #api_security

Medium

FastAPI + OpenID Connect with PKCE: Secure Mobile & CLI Auth Without SDK Hell

Use standards, not black-box SDKs, to give your apps and CLIs clean, secure single sign-on.

32 views02:05

Daily Writeups

⤷ Title: Solving OIDC Integration Challenges with Kong API Gateway and Angular UI
════════════════════════
𐀪 Author: Amanuel Eshete
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 22:48:41 GMT
════════════════════════
⌗ Tags: #kong_api_gateway #api_security #openid_connect #microservices #angular

Medium

Solving OIDC Integration Challenges with Kong API Gateway and Angular UI

Integrating OpenID Connect (OIDC) into a microservices platform can feel straightforward — until subtle issues put your UI, APIs, and…

26 views00:04

Daily Writeups

⤷ Title: Broken Keys: Critical Authlib Flaws Expose Millions to JWT Forgery and Padding Oracles
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 12:02:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authlib #CVE_2026_27962 #CVE_2026_28490 #CVE_2026_28498 #cybersecurity #JWT Security #OAuth #OpenID Connect #Padding Oracle #Python Security

Daily CyberSecurity

Broken Keys: Critical Authlib Flaws Expose Millions to JWT Forgery and Padding Oracles

Three critical flaws in Authlib (including CVSS 9.1 CVE-2026-27962) allow JWT forgery and padding oracle attacks. Update to version 1.6.9 immediately.

18 views13:04

Daily Writeups

⤷ Title: OAuth 2.0 & OIDC — How modern authentication actually works under the hood
════════════════════════
𐀪 Author: Reuben Lim
════════════════════════
ⴵ Time: Wed, 06 May 2026 17:17:15 GMT
════════════════════════
⌗ Tags: #authentication #oauth2 #openid_connect #application_security #web_development

Medium

OAuth 2.0 & OIDC — How modern authentication actually works under the hood

I once spent three hours debugging an authentication flow where a client was sending the client_secret in the URL query parameters. It…

9 views19:04

Daily Writeups

⤷ Title: Why third-party apps never need your password — OAuth, OpenID Connect, and SSO explained
════════════════════════
𐀪 Author: Dhruv Thakur
════════════════════════
ⴵ Time: Fri, 29 May 2026 04:03:13 GMT
════════════════════════
⌗ Tags: #openid_connect #sso #aml #api_security #oauth

Medium

Why third-party apps never need your password — OAuth, OpenID Connect, and SSO explained

When you click “Sign in with Google” on some app you just downloaded, something interesting happens. The app gets access to your data. Your…

26 views05:04

About

Blog

Apps

Platform