/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 www.arneswinnen.net
Authentication bypass on Airbnb via OAuth tokens theft - Arne Swinnen
| | homakov.blogspot.com
Egor Homakov: OAuth1, OAuth2, OAuth...?
2.9 parsecs away

Travel
| | TL;DR OAuth2 sucks. Please don't think about OAuth2 as about the next generation of OAuth1. They are completely different like colors: O...
| | philodev.one
Understanding oAuth Authentication Code Flow ยท PhiloBlog
3.4 parsecs away

Travel
| | oAuth is a hard to get into because of its (necessary) complexity. A basic understanding of the standard flow and the actors involved can help to make better decisions and understand the security implications of the choices.
| | stack-auth.com
OAuth from First Principles - Stack Auth
2.2 parsecs away

Travel
| | Stack Auth is open-source authentication for the modern web.
| | fhirblog.com
FHIR and OpenID Connect | Hay on FHIR
13.7 parsecs away

Travel
| If you've read the previous posts talking about OAuth2, then (hopefully) it's clear how a user can authorize an application to retrieve their data from some server without needing to expose their login credentials. The Authorization Server is the only component that needs to have the persons username and password (or whatever authorization method is...