/explore
|
You are here 
|
www.stevejgordon.co.uk | ||
| | | | |
newdevsguide.com
|
|
| | | | | JWT authentication can be a tricky concept to grasp, but the hotel keycard metaphor holds up remarkably well when explaining it. Let's see how that works. | |
| | | | |
svrooij.io
|
|
| | | | | I'm super enthusiastic about managed identities, because it allows you to deploy your application without having to worry about credentials. Federated credentials are a way to accomplish the same for none Azure resources. You can use federated credentials to authenticate several tasks inside Github Actions, and thus securely deploy your app to Azure without the need of a secret configured in GitHub. As the regular readers might expect this post will explain how federated credentials actually work inside GitHub Actions, a deep dive into the techniques that are actually driving this feature. Get a federation token from GitHub | |
| | | | |
www.ayush.nz
|
|
| | | | | [AI summary] This article provides a technical assessment of JSON Web Tokens (JWT) as a compact, self-contained mechanism for secure information exchange and authentication in APIs. | |
| | | | |
xbow.com
|
|
| | | As we shift our focus from benchmarks to real world applications, we will be sharing some of the most interesting vulnerabilities XBOW has found in real-world, open-source targets. The first of these is an authentication bypass in Scoold, a popular open-source Q&A platform. | ||
