Consolidating authentication and authorization into one platform shared by all our products
Conclusion ELN ID is an in-house project run by EarthLink Network as a company, developed by a team of one human owner with AI doing the implementat…
DevOps
⚑ Report a ProblemLatest DevOps news from Tech News
All topics
agents
ai
api
architecture
automation
aws
backend
beginners
cloud
database
devchallenge
devops
docker
javascript
kubernetes
llm
machinelearning
mcp
node
opensource
performance
productivity
programming
python
security
showdev
testing
tutorial
typescript
webdev
NextAuth / Auth.js Database Schema Explained
The short version NextAuth (now Auth.js) creates 4 tables in your database: users , accounts , sessions , and verification_tokens . The users and ac…
Next.js 15 Middleware: Auth, Rate Limiting & Edge Guide
Middleware is the most underused primitive in Next.js. Teams write one middleware for auth, ship it, and never touch it again. Meanwhile, they bolt…
Consent Revocation for GDPR Account Deletion: Go Runtime Access Gates
When a developer-tools user withdraws consent, the dangerous assumption is that deleting a row or changing a settings screen ends access immediately…
Our service discovery caught its own failure and switched itself off
We had a three-replica cluster that kept disagreeing with itself. Background jobs ran two and three times over. The answer wasn't in the logs; it wa…
Deploying Ory Kratos Open-Source Identity and User Management System on Ubuntu 24.04
Ory Kratos is an open-source, API-first identity and user management system handling registration, login, recovery, verification, and session manage…
How to Send Auth Codes via WhatsApp in Your App With Kinde
Your users are in San Francisco, Jakarta, São Paulo, and Sydney. They have WhatsApp open all day. They check it before they check their SMS inbox. W…
Authorization at Scale: Access Levels, Roles, and Compact Decisions
Authentication answers "who are you?" Authorization answers the harder question: "are you allowed to do this?" By the time a request reaches this st…
Multi-tenant auth and routing in Kubernetes
In the first four chapters of this series I've talked about what the Auth Gateway decides. This chapter is about who it decides for. We run a multi-…
Endpoint classification: OPEN, AUTHENTICATED, ACCESS_CONTROLLED
In Chapter 3 the controller branched on something called the "endpoint type": switch endpointType ( perms ) { case "OPEN" : ... case "AUTHENTICATED"…
Inside the Auth Service: From Token Validator to Policy Decision Point
Most auth services start simple — verify the token, return 200 or 401. Then requirements accumulate. Tenant isolation. Service accounts. Token revoc…
Why we built an Auth Gateway instead of putting auth in every service
If you've been on a platform team long enough, you've probably watched this slow-motion failure: You ship an auth library. Three services adopt it.…
NGINX auth_request: the small primitive that changed everything
In Chapter 1 I claimed our entire Auth Gateway is built on top of one NGINX directive: auth_request . This chapter is a deep dive into how that dire…