Tag
Authentication patterns and protocols — OAuth 2.0, OIDC, SAML, MFA, passwordless, and session strategies for modern applications.
80 posts · page 1 of 4
A guide to configuring OAuth2/OIDC in standalone Angular apps using provideOAuthClient, replacing traditional NgModule providers.
Part 8 · angular-oauth2-oidc in ProductionTraditional network perimeters are obsolete. Learn how identity-centric zero trust models enforce continuous evaluation and strong authentication to secure modern infrastructure.
Part 2 · Zero TrustA practical guide to managing access token expiration in Angular applications by leveraging userefreshtoken and setupautomaticsilentrefresh for uninterrupted user sessions.
Part 4 · angular-oauth2-oidc in ProductionA guide to implementing loadDiscoveryDocumentAndTryLogin and strict discovery document validation in Angular applications for secure authentication flows.
Part 3 · angular-oauth2-oidc in ProductionConfigure the essential AuthConfig properties in Angular-OAuth2-OIDC. Learn how to set requireHttps, remoteOnly, and nonceStateSeparator for secure authentication.
Part 2 · Angular-OAuth2-OIDC in ProductionLearn how to implement secure authentication in Angular using the code flow with PKCE extension via the angular-oauth2-oidc library.
Part 1 · angular-oauth2-oidc in ProductionRFC 9700 establishes essential security guidelines for OAuth 2.0 implementations, addressing critical vulnerabilities like mix-up attacks and redirect URI handling.
Part 7 · OAuth 2.0 RFCs Every Engineer Should ReadRFC 8414 defines how authorization servers publish supported authentication methods. This post explores the default client_secret_basic method and its alternatives.
Part 4 · Authorization Server Metadata (RFC 8414)Learn how to manage JWT expiration, rotation, and revocation effectively to secure your application's token lifecycle.
Learn how to implement gRPC interceptors to propagate OAuth2 tokens securely across microservices for improved service-to-service security.
Learn how to implement enterprise SSO with Spring Security SAML, covering service provider configuration and migration paths for Spring Boot applications.
Part 6 · Spring Security Deep Dive SeriesLearn how incremental authorization enhances the OAuth2 flow by requesting scopes progressively, optimizing scope management and consent UX.
Learn how to secure your Spring Boot applications with passwordless authentication using FIDO2 standards and WebAuthn protocols.
Learn how to implement OAuth2 authentication for Server-Sent Events to protect real-time streams in Spring applications.
Part 1 · Spring Security & Real-Time Data SeriesThis guide covers setting up identity-aware load balancing with NGINX and Keycloak, focusing on JWT handling and secure authentication routing.
Learn how to implement OAuth2 Proof-of-Possession (PoP) to secure token transmission using sender-constrained and certificate-bound token strategies.
Learn how to implement graceful key rotation using JWKS to maintain security and availability in your authentication infrastructure.
Part 1 · Security Architecture SeriesLearn how to set up passkey authentication in Keycloak using WebAuthn and FIDO2 protocols to replace traditional passwords with secure, passwordless login methods.
Learn how OAuth2 handles multiple response types like hybrid flow and OIDC, and understand the role of the authorization server in these flows.
Part 3 · OAuth2 & OIDC Mastery SeriesExplore essential authentication patterns for serverless identity in Lambda and cloud functions, including Cognito authorizers and security best practices.
