From Dev.to Community
Tech Articles
Curated developer articles, tutorials, and guides — auto-updated hourly
Eugeniya IvanovaSep 16, 2026 • 4 min read
IFTTT accepted our service on the first try. The flow broke on the first redirect.
Last week I was bringing Publora onto IFTTT. Our server was already live, OAuth was working, and the...
#ifttt#oauth#api#webdev
6 2
DevOps DailySep 17, 2026 • 4 min read
TLS Handshakes and OAuth Flows Are Easier to Learn by Clicking Through Them
There are two security flows every backend developer is supposed to know cold and almost everyone...
#security#tls#oauth#webdev
22 0
TonyDzi / PaloAlto Ai Research LabSep 15, 2026 • 3 min read
Adding OpenRouter to Nango: why /v1/models accepts a fake key
I use OpenRouter every day. It is one OpenAI-compatible API in front of hundreds of models from many...
#opensource#api#oauth#ai
0 0
OnaEiuspkzSep 16, 2026 • 3 min read
Stolen OAuth Tokens Outlive Password Resets: Hardening Session Material in SaaS Estates
Why stolen OAuth refresh tokens survive password resets, and the binding, rotation and detection con...
#identity#oauth#saassecurity#incidentresponse
0 0
BaramworkSep 17, 2026 • 4 min read
2,967 MCP servers advertise OAuth. 8% meet the July spec.
Correction (2026-09-19). I framed RFC 9207 iss and Client ID Metadata Documents as July-spec...
#mcp#oauth#security#ai
0 1
Jonathan BlessingSep 18, 2026 • 15 min read
MCP Auth and Security: OAuth, Scopes, and Enterprise Permissions Guide
MCP authentication: OAuth 2.1 + PKCE, Dynamic Client Registration, scope design per-resource per-ver...
#mcp#security#oauth#ai
1 0
chovySep 16, 2026 • 3 min read
nixamp 0.17: a room with a door, a ticket and a login
nixamp 0.17: a room with a door, a ticket and a login nixamp 0.17.1 is out. Three things...
#authentication#oauth#security#software
0 0
LinusHolm3764Sep 15, 2026 • 4 min read
Patient Portal OAuth Login: Explicit Consent and Refresh Token Rotation in Node.js
OAuth makes a patient portal login feel familiar, but it does not answer the hard question: should.....
#oauth#node#healthcare#security
0 0
SophiaXSSep 19, 2026 • 5 min read
OAuth Recovery Links Need a Revocation Plan
Email recovery proves mailbox access, not identity. Use scoped tokens, clear revocation rules, and u...
#security#oauth#authentication#webdev
1 0
SophiaXSSep 18, 2026 • 4 min read
OAuth Recovery Emails Need a Trust Boundary
A threat-model guide to OAuth account recovery emails, token binding, privacy-aware signals, and saf...
#security#oauth#privacy#authentication
1 0
Jangwook KimSep 18, 2026 • 13 min read
FastMCP Streamable HTTP in Production: Auth, DNS Rebinding, and Docker Gotchas
We deployed FastMCP behind Docker and nginx, wired it to OAuth token introspection, and tested Strea...
#fastmcp#mcp#oauth#docker
0 0
SophiaXSSep 16, 2026 • 4 min read
OAuth Email Verification Needs a Real Threat Model
Email verification can prove mailbox access without proving identity. Use a threat model and a small...
#security#oauth#authentication#webdev
1 0
Finn AalbergSep 16, 2026 • 14 min read
MCP Authentication and Authorization Explained
TL;DR The Model Context Protocol (MCP) specification defines transport-level authorization using.....
#mcp#security#oauth#architecture
0 0
SophiaXSSep 18, 2026 • 4 min read
OAuth Device Flow Needs an Intent Boundary
A practical threat model for OAuth device authorization, user intent, polling, privacy signals, and ...
#security#oauth#authentication#privacy
1 0
magnusberg2958Sep 18, 2026 • 6 min read
OAuth Provider Strategy — Balancing Discovery and Identity Resolution Complexity
The hard part of moving off a managed OAuth provider is not generating a consent URL. It is deciding...
#oauth#authentication#sre
0 0
BarnabyVance6852Sep 18, 2026 • 5 min read
OAuth Provider Strategy Explained: 3 Checks for Discovery and Identity Resolution
Short answer: treat provider discovery and identity resolution as two different security boundaries....
#oauth#authentication#security
0 0
Lars WinstandSep 19, 2026 • 8 min read
OAuth redirect URI mismatch ate more time than my agent logic — 5 setup changes that finally fixed Google, Slack, and HubSpot
A practical DEV.to rewrite for developers debugging OAuth redirect URI mismatch errors across Google...
#oauth#node#webdev#api
0 0