/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 homakov.blogspot.com
Egor Homakov: OAuth2: One access_token To Rule Them All
| | mydeveloperplanet.com
Setup OpenID Connect with Keycloak: A Step-by-Step Guide
2.6 parsecs away

Travel
| | This blog provides comprehensive guidance on setting up the OpenID Connect Authorization Code Flow using Keycloak. It explains key concepts, prerequisites, and step-by-step instructions to create realms, clients, and users. The blog emphasizes understanding OAuth2.0 and OIDC, concluding with the implementation of the Authorization Code Flow in applications.
| | blog.doyensec.com
Common OAuth Vulnerabilities · Doyensec's Blog
2.3 parsecs away

Travel
| | Common OAuth Vulnerabilities
| | philodev.one
Understanding oAuth Authentication Code Flow · PhiloBlog
2.9 parsecs away

Travel
| | oAuth is a hard to get into because of its (necessary) complexity. A basic understanding of the standard flow and the actors involved can help to make better decisions and understand the security implications of the choices.
| | fhirblog.com
FHIR and OpenID Connect | Hay on FHIR
11.7 parsecs away

Travel
| If you've read the previous posts talking about OAuth2, then (hopefully) it's clear how a user can authorize an application to retrieve their data from some server without needing to expose their login credentials. The Authorization Server is the only component that needs to have the persons username and password (or whatever authorization method is...