8 min readtechnicalFeatured
Securing Legacy Applications with a Reverse Proxy Identity Gateway
Learn how to secure legacy applications by implementing a reverse proxy identity gateway such as Pomerium or Ory Oathkeeper to modernize authentication.
All tags
Tag
Authentication
Authentication patterns and protocols — OAuth 2.0, OIDC, SAML, MFA, passwordless, and session strategies for modern applications.
78 posts · page 2 of 4
10 min readBackendFeatured
Implementing Progressive Profiling in Identity Applications
Learn how to implement progressive profiling in identity applications to improve registration UX and gather data incrementally without friction.
Part 3 · Identity Architecture Patterns
7 min readBackendFeatured
Building a Custom Authentication Provider in Spring Security
Learn how to construct a custom authentication provider in Spring Security to handle specific user validation logic and security requirements.
10 min readTechnicalFeatured
OAuth2 Security Best Practices Checklist: 2025 Edition
Review essential OAuth2 security best practices, audit criteria, and security review steps for 2025 to ensure strong authentication integrity.
10 min readSecurityFeatured
Implementing Account Lockout and Brute Force Protection in Spring Security
Learn how to secure your Spring applications against brute force attacks by implementing account lockout strategies, rate limiting, and CAPTCHA integration.
10 min readTechnicalFeatured
How Browser Cookies Work in SSO: A Technical Deep Dive
Explore the mechanics of browser cookies in SSO environments, including SameSite policies, third-party restrictions, and security implications for cross-domain authentication.
Part 3 · Web Security & Authentication Architecture
9 min readDevelopmentFeatured
The Complete Guide to JSON Web Token (JWT) Claims
Explore registered and custom JWT claims, learn token validation techniques, and apply best practices for secure authentication.
10 min readBackendFeatured
Identity Architecture Patterns for Micro-Frontends and Multi-Platform
Explore essential identity architecture patterns for micro-frontends and multi-platform setups, including BFF, cross-platform SSO, and unified identity solutions.
Part 3 · Micro-Frontend Security Series
9 min readBackendFeatured
Building an Identity-Aware API Gateway with Kong and OIDC
Learn how to implement effective identity-aware authentication in your API gateway using Kong, OIDC, and JWT plugins.
8 min readBackendFeatured
Common OAuth2 Implementation Mistakes and How to Avoid Them
Learn to avoid critical OAuth2 implementation errors and security anti-patterns by applying practical guidance for secure authentication flows.
8 min readBackendFeatured
Credential Stuffing and Account Takeover Prevention
Advanced techniques for defending against credential stuffing and preventing account takeovers through effective login security measures.
12 min readDevelopmentFeatured
LDAP vs Active Directory vs Cloud Directory: Directory Services Compared
Explore the differences between LDAP, Active Directory, and cloud-based directory services to understand their roles in modern identity management.
9 min readtechnicalFeatured
gRPC Security: TLS, Token Propagation, and Interceptor Patterns
Explore essential gRPC security strategies covering TLS configuration, mTLS implementation, token propagation techniques, and effective interceptor patterns.
8 min readBackendFeatured
GraphQL Security: Authentication and Authorization Patterns
Learn essential patterns for securing GraphQL APIs, covering authentication flows, authorization strategies, and managing query complexity to prevent abuse.
9 min readtechnicalFeatured
How Identity Provider Bridging Works: SAML-to-OIDC Token Translation
Explore how identity provider bridging translates SAML assertions into OIDC tokens, facilitating integration between disparate authentication protocols using brokers like Keycloak.
Part 1 · Identity Architecture Series
7 min readBackendFeatured
Spring Security Method Security: @PreAuthorize, @Secured, and SpEL
Learn to implement method-level authorization in Spring applications using @PreAuthorize, @Secured, and Spring Expression Language (SpEL) for effective RBAC.
Part 4 · Spring Security Deep Dive Series
9 min readDevelopmentFeatured
Building a Custom UserDetailsService with Spring Security
This guide covers implementing a custom UserDetailsService in Spring Security, focusing on user loading mechanisms and caching strategies for enhanced security.
Part 1 · Machine Identity & DevSecOps Series
9 min readTechnicalFeatured
Spring Security Password Encoding: BCrypt, Argon2, and PBKDF2
Explore the mechanics of BCrypt, Argon2, and PBKDF2 within Spring Security for implementing secure password hashing in modern applications.
Part 15 · Spring Security Deep Dive Series
8 min readBackendFeatured
Spring Security: Filters, Chains & Auth
Explore the internals of Spring Security, focusing on how filters compose the SecurityFilterChain and drive the authentication process.
Part 2 · Spring Security Deep Dive Series
8 min readDevelopmentFeatured
Spring Security with JWT: Complete Authentication Implementation
Learn how to build an authentication system using Spring Security and JWT, including filter chains, refresh token handling, and blacklisting mechanisms for advanced applications.
Part 3 · Spring Security Deep Dive Series