From Dev.to Community
Tech Articles
Curated developer articles, tutorials, and guides — auto-updated hourly
Hadil Ben Abdallah2d ago • 12 min read
Where Do Your Users' Passwords Actually Live? Self-Hosted vs Managed Keycloak
Choosing between self-hosted and managed Keycloak affects more than where your identity service runs...
#programming#development#authentication#keycloak
21 4
Diogo Soares4d ago • 13 min read
Your AI Agent Will Build an Insecure Login, Unless You Tell It Not To
"Build me an app with login." It's one of the most common prompts people give to coding agents, and...
#security#ai#webdev#authentication
1 3
RuntimeStack1d ago • 3 min read
You've Never Actually Sent a JWT (JOSE, JWS, JWE, JWA and JWK Explained)
You've used JWTs a hundred times. But here's the thing: you've probably never actually sent...
#jwt#security#authentication
0 0
Oga1d ago • 6 min read
ASP.NET Core Authentication Endpoints: Why I Built AuthEndpoints
ASP.NET Core wires up auth middleware but no login, register, refresh or 2FA endpoints. AuthEndpoint...
#dotnet#aspnetcore#authentication#csharp
2 2
Tanu PriyaOct 16, 2026 • 9 min read
How Can Passkeys Let You Log In Without Ever Sending Your Password?
Imagine a company discovers that attackers have stolen its user database. If passwords were stored.....
#authentication#cybersecurity#security
0 0
tinali7564-eng22h ago • 9 min read
The Definitive Guide to JWT Security in 2026: HS256 vs RS256 vs ES256, The alg: none Exploit, kid Parameter Attacks, and Token
The Definitive Guide to JWT Security in 2026: HS256 vs RS256 vs ES256, The alg: none...
#jwt#security#authentication#oauth2
0 0
Stefano Pinato5d ago • 6 min read
Why You Shouldn't Build Your Own Authentication From Scratch
The cost is not writing it, it is keeping it right TL;DR: A working login takes an...
#security#authentication#dotnet#aspnetcore
1 0
Ismail ZAHIR4d ago • 8 min read
What Contributing to Two Keycloak Projects Taught Me About Building Authentication Extensions
Three easy-to-miss boundaries in Keycloak extensions: selection, enrollment and packaging.
#authentication#java#keycloak#opensource
1 0
GeekCoding101.comOct 16, 2026 • 5 min read
OAuth 2.0 Authorization Code Flow, Step by Step
Originally published at GeekCoding101. Brief Description The OAuth 2.0 authorization cod...
#oauth#security#webdev#authentication
1 0
GeekCoding101.com6d ago • 6 min read
HTTP Basic Authentication Explained (RFC 7617)
Originally published at GeekCoding101. Introduction In this blog post, we will dive into...
#security#authentication#node#webdev
0 0
Sora2 Hub Team6d ago • 3 min read
Supabase Auth dans le middleware Next.js : 6 erreurs fréquentes (et comment les corriger)
Le middleware de Next.js est l'endroit naturel pour rafraîchir la session Supabase et rediriger les....
#nextjs#supabase#webdev#authentication
0 0
corbado4d ago • 4 min read
AAGUID policies for passkeys: what they really enforce
Why AAGUID restrictions are trickier than they look If you're designing passkey policy for...
#webauth#passkeys#security#authentication
0 0
Boitumelo Phetla3d ago • 3 min read
OAuth sign-in: letting users bring an identity they already trust
Every new product asks for a new password, and every new password is one more thing to forget,...
#oauth#authentication#security#webdev
0 0
OnaEiuspkzOct 16, 2026 • 4 min read
CVE-2026-19572: a hardcoded bypass in the console that hands out software licences
A licence administration console is an estate-wide control point; a bypass in its SOAP handler is an...
#licensing#authentication#embeddedsoftware#vulnerability
0 0
andreagomez4d ago • 2 min read
Port 27017 and 1,676,736 Matches: Databases That Answer Before Anyone Authenticates
1,676,736 services answer on the MongoDB default port. Why an open database is found by scanning rat...
#mongodb#27017#databaseexposure#authentication
0 0
Daniel Pertu2d ago • 4 min read
Our proxy writes down where you were going on every bounce to the login form, and the login form has never read it
The next parameter on PubTrivia's sign-in redirect is written on every gated request and consumed by...
#nextjs#authentication#webdev#typescript
1 0
theauthkidOct 16, 2026 • 5 min read
OAuth Scopes Made Sense to Me. Then I Learned About Cedar Policies.
Understanding why modern authorization sometimes needs more than roles, scopes, and...
#cedar#policies#authentication#authorization
0 1
kevindev4d ago • 5 min read
A REST API State Machine for Email Verification
Model email verification as explicit REST API states with PostgreSQL constraints, idempotent retries...
#backend#restapi#postgres#authentication
0 0
kevindevOct 16, 2026 • 5 min read
Lease-Based Email Fixtures for REST APIs
A backend pattern for owning, correlating, expiring, and cleaning up disposable email fixtures in RE...
#backend#restapi#postgres#authentication
0 0
RC6d ago • 3 min read
AI agent rerouted an insurer's login code to itself
The login request on a major insurer's production site carried two fields that decided where your...
#authentication#pentesting#aiagents
0 0
Russell Jones1d ago • 4 min read
Do not construct authentication policy inside a login helper
Keep login, logout, eligibility, credential upgrades, and HTTP permission checks behind the authenti...
#php#authentication#security#waaseyaa
0 0
jeffrey5d ago • 3 min read
3.9 million PostgreSQL services and the pg_hba line that decides everything
Why first-match host-based authentication rules, not missing features, decide PostgreSQL exposure.
#exposure#postgres#authentication
0 0
jeffreyOct 16, 2026 • 2 min read
Logging Gaps That Hide Replayed MOVEit Transfer Sessions
Logging Gaps That Hide Replayed MOVEit Transfer Sessions CVE-2026-89070 is an...
#authentication#cybersecurity#infosec#security
0 0
facilishz4d ago • 2 min read
Spoofing is not stealing: the CVE-2026-104935 authentication problem
Spoofing is not stealing: the CVE-2026-104935 authentication problem
#vulnerability#authentication#cwe290#ivanti
0 0