DEV Community

#authentication

User authentication mechanisms

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
A session reaches our app four different ways, and detectSessionInUrl is off so one function can own all of them

A session reaches our app four different ways, and detectSessionInUrl is off so one function can own all of them

Comments
7 min read
Step-Up Verification: OTP, Magic Link

Step-Up Verification: OTP, Magic Link

Comments
6 min read
Passkeys Explained: The Password Replacement That Logs You In With Your Face or Fingerprint

Passkeys Explained: The Password Replacement That Logs You In With Your Face or Fingerprint

Comments
2 min read
Legacy Application Modernization Without Forcing Password Resets

Legacy Application Modernization Without Forcing Password Resets

Comments
5 min read
Validating OAuth Metadata and JWTs

Validating OAuth Metadata and JWTs

Comments
3 min read
Make Email Verification a Transactional Workflow

Make Email Verification a Transactional Workflow

Comments 1
5 min read
Building GitHub Authentication: From GitHub App Setup to OAuth Callback

Building GitHub Authentication: From GitHub App Setup to OAuth Callback

Comments
5 min read
JWT Decoding vs Verification: Debug Token Expiration Without Making Security Mistakes

JWT Decoding vs Verification: Debug Token Expiration Without Making Security Mistakes

Comments
9 min read
GitHub CLI's New Expiring Tokens Still Leave Your Refresh Token Exposed to Malware

GitHub CLI's New Expiring Tokens Still Leave Your Refresh Token Exposed to Malware

Comments
7 min read
The fast-jwt fix for algorithm confusion missed the prefix

The fast-jwt fix for algorithm confusion missed the prefix

Comments
5 min read
One TLS setting turned off Basic auth for every HAProxy Data Plane API listener

One TLS setting turned off Basic auth for every HAProxy Data Plane API listener

Comments
4 min read
Passkeys Explained: What Changes Behind the Sign-In Button

Passkeys Explained: What Changes Behind the Sign-In Button

Comments
4 min read
WebAuthn RP ID vs Origin: Fixing Cross-Domain Passkeys

WebAuthn RP ID vs Origin: Fixing Cross-Domain Passkeys

Comments
4 min read
A Passkey Deployment Checklist Beyond the Happy-Path Demo

A Passkey Deployment Checklist Beyond the Happy-Path Demo

Comments
4 min read
Clickjacking Still Targets Approval Buttons: A Checklist for Login Teams

Clickjacking Still Targets Approval Buttons: A Checklist for Login Teams

Comments
3 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.