Menu

#Oidc

16 posts

Feed·
16 of 16 posts
Trusted Sources for Deployment Protection - Vercel
🖼️
0

Trusted Sources for Deployment Protection - Vercel

Vercel News·Kit Foster·4 days ago
#mvm8SCsK
#vercel#token#oidc#trusted#project#photo

You can now authorize specific Vercel projects and external CI services to reach this project's protected deployments using short-lived OIDC tokens, without sharing a static bypass secret or opening the deployment to the public internet

15s
Read More
OAuth 2.0 and OIDC Implementation Guide 2026: Complete Developer Walkthrough
🖼️
0

OAuth 2.0 and OIDC Implementation Guide 2026: Complete Developer Walkthrough

DEV Community·丁久·21 days ago
#hanvICEg
#oauth#oauth20#oidc#code#tokens#token

Implement OAuth 2.0 and OpenID Connect from scratch — understand authorization codes, PKCE, JWT tokens, and security best practices.

15s
Read More
JWT verification in production: an 8-check field guide
🖼️
0

JWT verification in production: an 8-check field guide

DEV Community·Blue Hills·29 days ago
#maSWw6eI
#jwt#oidc#security#deved#token#issuer

The eight checks every production JWT verifier must do, what each one prevents, and structured error codes for each failure mode. A reference doc for backend and identity teams.

15s
Read More
Three JWT bugs that ship to prod silently — and the 5-line CI test that catches them
🖼️
0

Three JWT bugs that ship to prod silently — and the 5-line CI test that catches them

DEV Community·Keynes Paul·about 1 month ago
#URpX13no
#bug#jwt#oidc#devsecops#jwks#token

Three concrete failure modes that take down OIDC in production: JWKS rotation without overlap, wrong audience claims, and issuer config drift.…

15s
Read More
Does Authentik support only one webfinger-discoverable OIDC issuer href for multiple applications per hostname?
📰
0

Does Authentik support only one webfinger-discoverable OIDC issuer href for multiple applications per hostname?

Reddit r/selfhosted·u/-jsteinke·about 1 month ago
#9ThLJVxd

I like Authentik and it's what I use but it seems like it doesn't support per application OIDC via a global application agnostic issuer href using webfinger which seems to basically mean you can only have one OIDC application per hostname unless you do…

15s
Read More
📰
0

Part I: Developing Simple OpenID Authorization Server with Node.js & Typescript

DEV Community: koa·Ebrahim Hoseiny Fadae·about 1 month ago
#Rde3wT3z
#dev#class#code#highlight#oidc#article

Introduction In this tutorial, we will explore how to build an authorization server using the panava/node-oidc-provider library, which is built on top of the koajs/koa framework.…

15s
Read More
📰
0

Part II: Persisting OpenID Server Data on MongoDB with Node.js

DEV Community: koa·Ebrahim Hoseiny Fadae·about 1 month ago
#8PU8TQDv
#dev#class#code#highlight#oidc#article

Introduction In this article, we'll explore how to integrate MongoDB with an OIDC (OpenID Connect 1.0) authentication server. We'll be using the panava/node-oidc-provider library for implementing the OIDC server and the Mongoose for connecting to MongoDB.…

15s
Read More