Хватит строить Kubernetes для пятнадцати человек
Я много лет занимался инфраструктурой. Потом перестал и ушёл в продукт — но привычка заглядывать: «А как у вас тут всё устроено?» осталась. И вот те…
Последние новости
⚑ Сообщить о проблемеTech news from the best sources
Все темы
- игры
AI
Gear
News
Tech
agents
ai
api
architecture
automation
beginners
career
database
devops
javascript
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
testing
tutorial
typescript
webdev
Docker Hub gets OIDC federation for GitHub Actions, retiring the PAT-in-a-secret pattern
Docker has switched on OpenID Connect authentication between GitHub Actions and Docker Hub, letting a workflow exchange a signed per-run identity to…
Our login hung for exactly 10 seconds. Our own security headers did it.
For about a week, returning users who opened our portal watched the word "Loading…" sit on the screen for ten seconds before the login page appeared…
Овцеводческая CRM, Узбекистан и .NET 10: семь инженерных историй с граблями
Мы делаем QoyHunter — учётную систему для овцеводческих хозяйств Узбекистана, с витриной животных, доставкой и блогом на соседних поддоменах. С точк…
Anthropic swaps per-developer Claude Code secrets for an OIDC gateway
Every laptop with Claude Code on it tends to collect long-lived secrets like lint. A cloud key here, a service credential there, an API token in a d…
OAUTH2.0 In Action — A Guide To Implementing OAUTH In Apps and Websites.
Table of contents What is OAUTH A trip to OAUTH1.0Ville What is OAUTH2.0 Examples of OAUTH Technology OIDC Hands-on Implementation with Microsoft En…
Azure DevOps issuer in WIF service connections heads for July 2027 retirement
About a year of lead time, then a forced move. Microsoft announced on June 22 that the Azure DevOps issuer used in workload identity federation (WIF…
Understanding OIDC Authentication Flow Visually
OpenID Connect is an identity layer built on top of OAuth 2.0 that provides a standardized way for apps to verify a user's identity and obtain basic…
SSO Is More Than "Log In Once"
A practical look at identity, sessions, OAuth 2.0, OpenID Connect, and tenant isolation. Single Sign-On is often summarized as "log in once and acce…
Логин через Telegram по-новому: разбираем OIDC-флоу oauth.telegram.org и собираем его на Python
Telegram теперь полноценный OpenID-провайдер: oauth.telegram.org, JWKS, JWT, claims. Туториалы на GitHub при этом массово показывают старый виджет с…
JWT verification in production: an 8-check field guide
A correct JWT verifier does eight things. Most production verifiers I have read do four or five of them. The other three or four get skipped because…
Three JWT bugs that ship to prod silently — and the 5-line CI test that catches them
Your auth tests pass. Your token verification works. Then your identity provider rotates a key at 02:47, your service hasn't refreshed its JWKS cach…