Getting Started with WSO2 Identity Server: Understanding Authentication and Single Sign-On
Getting Started with WSO2 Identity Server: Understanding Authentication and Single Sign-On Modern applications need more than just usernames and passw…
Architecture
⚑ Report a ProblemLatest Architecture news from Tech News
All topics
agents
ai
api
architecture
automation
aws
backend
beginners
career
database
devchallenge
devops
discuss
javascript
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
softwareengineering
systemdesign
tutorial
typescript
webdev
Preventing Session Cookie Reuse Across Devices: Addressing Security Concerns with Alternative Solutions
Introduction The manager’s directive to prevent session cookie reuse across devices originates from a practical observation: authenticated session coo…
One login to rule them all: centralized auth for internal tools with Caddy
I am lazy. Not in the "I don't want to work" sense 1 , but in the "I refuse to solve the same problem twice" sense. So when I found myself looking at …
Getting Out of the Password Business
Our old authentication system logged users in with the OAuth2 client_credentials grant. If you know OAuth, you just winced. client_credentials exists …
Passwordless Laravel Auth Is Easy to Demo and Harder to Run Well
Passwordless auth sounds like a simplification until you try to run it in a real Laravel product. The UI gets simpler. The security model does not. Yo…
Empty Is Not Clean: Five Fail-Open Bugs in an AI Agent
A policy said deny anything under /etc . A Bash call read /etc/shadow and came back {allow, rule: 'trust-bash'} . No human in the loop. The deny rule …
The Complete Guide to Biometric Authentication in React Native
In today's mobile-first world, users expect authentication to be both secure and effortless. Typing passwords every time an app is opened not only imp…
Adversarial Review: The Six Lenses That Halted a Rollout
"We shipped the safety work" is a feeling, not a fact. Before you hand a shared, governed system to a team, the only thing that converts that feeling …
What is SAML? A Complete Guide for API and Identity Engineers
Introduction If you've worked with enterprise APIs, you've probably heard statements like: "Our application uses SAML SSO." "The Identity Provider wil…
How Enterprise React Apps Handle JWT Token Refresh Automatically
Access Token & Refresh Token Authentication in React (Axios + React Query) Authentication is one of the most critical parts of modern web applicat…
Blazor JWT Authentication with Radzen & .NET 10: Complete Starter Template
Learn secure authentication in Blazor with this production-ready starter template. JWT tokens, cookies, Radzen UI, and clean architecture explained. T…
From Passwords to Token-based Authentication
Every authentication mechanism in use today emerged to address a specific set of constraints the previous one wasn't designed for. This article walks …
The Internet's Biggest Lie: Your Password Is Never Actually Verified
What if I told you that the password you type during login is never actually compared with the one stored on the server? Every day, billions of people…
Mobile App Authentication: Best Practices for iOS and Android Developers (2026)
The mobile app authentication best practices question is the single hardest one to answer well in mobile application security, because the answers tha…
MCP Server Auth: The API Is the Real Boundary
A single shared API key is fine right up until a second person uses it. intent-brain — the system, repo qmd-team-intent-kb , renamed to the intent-bra…
Why you shouldn't build your own authentication system: lessons from dozens of customer interviews
This article is created by Logto , an open-source solution that helps developers implement secure auth in minutes instead of months. Authentication lo…
WebSocket Authentication Deep Dive — Tokens, Stateful Connections, and the CORS Bypass Nobody Warns You About
WebSocket Authentication Deep Dive — Tokens, Stateful Connections, and the CORS Bypass Nobody Warns You About WebSockets are powerful. They enable rea…
SSO Is More Than "Log In Once"
A practical look at identity, sessions, OAuth 2.0, OpenID Connect, and tenant isolation. Single Sign-On is often summarized as "log in once and access…
Building AutoStack.Identity: A Zero-Dependency .NET 10 Library for SAML 2.0, JWT, and XML Signing
The Problem That Started This We were building a healthcare connectivity platform — multi-tenant, Azure-hosted, integrating with enterprise IdPs via S…
How to handle hardware attestation without locking out real users
Last month I got a bug report that made me close my laptop and go for a walk. A paying user couldn't log in. Their device was rooted? Not according to…
Deep Dive Two-Factor Authentication vs Passkeys: A Head-to-Head
Deep Dive: Two-Factor Authentication vs Passkeys – A Head-to-Head The authentication landscape is shifting rapidly: for decades, passwords paired with…