Collections
Series
Curated multi-part series — read end-to-end on OAuth 2.0, OIDC, SAML, Keycloak, and more.
Latest series · 8 parts
JWT From the Spec Up
Understand the internal structure of JWTs by examining the header, payload, and signature sections, ensuring secure authentication implementation.
- 1Anatomy of a JWT: Header, Payload, and Signature
- 2The Seven Registered Claims: iss, sub, aud, exp, nbf, iat, jti
- 3JWT Custom Claims: Public, Private, and Custom | JWT From the Spec Up
All series(30)
Series · 10 parts
OAuth 2.0 RFCs Every Engineer Should Read
- 1
RFC 6749 Revisited: What Still Applies in 2026
Aug 3, 2026 · 6 min read
- 2
RFC 7636: PKCE and the Authorization Code Interception Attack
Aug 4, 2026 · 6 min read
- 3
RFC 8628: The Device Authorization Grant
Aug 5, 2026 · 6 min read
- 4
RFC 8693: Token Exchange, Delegation, and Impersonation
Jul 26, 2026 · 6 min read
Series · 6 parts
mTLS With Spring Boot
- 1
TLS and mTLS Fundamentals
Jul 31, 2026 · 6 min read
- 2
Understanding X.509 Certificates: From Basics to mTLS Implementation
May 28, 2026 · 6 min read
- 3
Enabling TLS and mTLS in Spring Boot
Aug 1, 2026 · 6 min read
- 4
Implementing Mutual TLS in Spring Boot Applications
May 28, 2026 · 6 min read
Series · 1 part
Keycloak in Production
Series · 5 parts
AWS Secrets and Key Management
- 1
AWS Secrets Manager vs Parameter Store: The Actual Decision
Jul 30, 2026 · 6 min read
- 2
KMS Fundamentals: CMKs, Data Keys, and Envelope Encryption
Jul 30, 2026 · 6 min read
- 3
KMS vs Secrets Manager: Different Jobs
Jul 31, 2026 · 6 min read
- 4
Automatic Secret Rotation With Lambda
Jul 31, 2026 · 6 min read
Series · 7 parts
Spring Security Filter Chain Mastery
- 1
The Spring Security Filter Chain, Ordered
Jul 30, 2026 · 6 min read
- 2
SecurityFilterChain in Spring Security 6
Jul 30, 2026 · 6 min read
- 3
addFilterBefore and UsernamePasswordAuthenticationFilter
Jul 30, 2026 · 6 min read
- 4
OncePerRequestFilter: The Right Base Class for JWT
Jul 31, 2026 · 6 min read
Series · 6 parts
Machine Identity and Workload Auth
- 1
Machine Identity Is the Bigger Problem
Jul 31, 2026 · 6 min read
- 2
X.509 and mTLS for Service Identity
Jul 31, 2026 · 6 min read
- 3
SPIFFE and SPIRE: Securing Identity in Ephemeral Infrastructure
Jul 31, 2026 · 6 min read
- 4
Short-Lived Credentials Over Long-Lived Secrets
Jul 31, 2026 · 6 min read
Series · 6 parts
Passwordless Authentication
- 1
Why Passwords Are Finally Losing | WebAuthn Guide
Jul 30, 2026 · 6 min read
- 2
Magic Links: Design, Threats, and Session Binding
Jul 30, 2026 · 6 min read
- 3
WebAuthn and FIDO2, Explained
Jul 30, 2026 · 6 min read
- 4
Passkeys: Sync, Device-Bound, and Recovery
Jul 30, 2026 · 6 min read
Series · 5 parts
Zero Trust, Implemented
- 1
What Zero Trust Actually Requires
Jul 29, 2026 · 6 min read
- 2
Identity as the Perimeter
Jul 30, 2026 · 6 min read
- 3
Device Trust and Certificate-Based Identity
Jul 30, 2026 · 6 min read
- 4
Policy Enforcement Points and Micro-Segmentation
Jul 30, 2026 · 6 min read
Series · 10 parts
OAuth 2.0 Security
- 1
OAuth2 Client Authentication Methods: client_secret_basic, private_key_jwt, and More
May 27, 2026 · 6 min read
- 2
Understanding OAuth 2.0 Pushed Authorization Requests (PAR)
May 26, 2026 · 6 min read
- 3
Understanding DPoP for OAuth2: Securing Token Binding with RFC 9449
May 27, 2026 · 6 min read
- 4
Implementing OAuth2 Proof-of-Possession (PoP) Security Architecture
May 29, 2026 · 7 min read
Series · 7 parts
Identity Analytics & Observability
- 1
Building Identity Analytics: Mining Authentication Logs for Insights
May 29, 2026 · 6 min read
- 2
Building a Centralized Audit Log for Identity Events with ELK Stack
May 30, 2026 · 6 min read
- 3
Building a Real-Time Identity Dashboard with Keycloak and Grafana
May 28, 2026 · 6 min read
- 4
Implementing User Behavior Analytics for Identity Security
May 29, 2026 · 6 min read
Series · 5 parts
Identity Gateways & Legacy Integration
- 1
Building an Identity-Aware API Gateway with Kong and OIDC
May 27, 2026 · 6 min read
- 2
Building Identity-Aware Load Balancing with NGINX and Keycloak
May 29, 2026 · 6 min read
- 3
Building an Identity Gateway with Spring Cloud Gateway
May 28, 2026 · 6 min read
- 4
Securing Legacy Applications with a Reverse Proxy Identity Gateway
May 29, 2026 · 6 min read
Series · 2 parts
Security Architecture Series
Series · 15 parts
Spring Security Deep Dive Series
- 1
AWS Compliance Automation: Config, Audit Manager, and Security Hub
May 25, 2026 · 6 min read
- 2
Spring Security: Filters, Chains & Auth
May 25, 2026 · 6 min read
- 3
Spring Security with JWT: Complete Authentication Implementation
May 25, 2026 · 8 min read
- 4
Spring Security Method Security: @PreAuthorize, @Secured, and SpEL
May 26, 2026 · 6 min read
Series · 15 parts
Keycloak Masterclass Series
- 1
Keycloak Architecture Deep Dive: Internal Components and Data Flow
May 23, 2026 · 6 min read
- 2
Keycloak Production: TLS, DB Tuning & K8s
Jul 30, 2026 · 6 min read
- 3
Keycloak Custom Authentication Flows: Building Custom Login Experiences
May 23, 2026 · 6 min read
- 4
Keycloak and Spring Boot Integration: Advanced Patterns
May 23, 2026 · 6 min read
Series · 10 parts
OpenID Connect Deep Dive Series
- 1
OpenID Connect Guide: Extending OAuth 2.0 for Identity Verification
May 22, 2026 · 6 min read
- 2
Understanding JWT: Structure, Signing, and Validation
May 22, 2026 · 6 min read
- 3
Implementing OIDC Authentication in Spring Boot with Keycloak
May 22, 2026 · 8 min read
- 4
OIDC Token Management: Access, ID, and Refresh Token Strategies
May 22, 2026 · 6 min read
Series · 10 parts
OAuth 2.0 Deep Dive Series
- 1
OAuth 2.0 Fundamentals: Grant Types Explained Simply
Jul 30, 2026 · 6 min read
- 2
OAuth 2.0 Authorization Code Flow with PKCE: A Complete Guide
May 21, 2026 · 6 min read
- 3
Implementing OAuth 2.0 Client Credentials Flow for Microservices
May 21, 2026 · 6 min read
- 4
OAuth 2.0 Token Introspection & Revocation Strategies
May 21, 2026 · 6 min read
Series · 7 parts
angular-oauth2-oidc in Production
- 1
angular-oauth2-oidc: Setting Up Code Flow With PKCE
Jul 28, 2026 · 6 min read
- 2
The AuthConfig Reference: Every Property That Matters
Jul 29, 2026 · 6 min read
- 3
Angular OAuth2/OIDC: loadDiscoveryDocumentAndTryLogin
Jul 29, 2026 · 6 min read
- 4
OAuth 2.0 Refresh Tokens in Angular: Silent Refresh with useRefreshTokens
Jul 29, 2026 · 6 min read
Series · 5 parts
Multi-Cloud Identity
- 1
Why Multi-Cloud Identity Fragments
Jul 29, 2026 · 6 min read
- 2
Multi Cloud Identity Management Framework: A Reference Architecture
Jul 29, 2026 · 6 min read
- 3
Federating AWS, Azure, and GCP to One Identity Provider
Jul 29, 2026 · 6 min read
- 4
Building Resilient Multi-Region IAM with Keycloak and AWS Global Accelerator
May 30, 2026 · 6 min read
Series · 4 parts
AWS Security Observability
Series · 7 parts
Identity Platform Architecture
- 1
Designing a Centralized Identity Platform: Lessons Learned
May 26, 2026 · 6 min read
- 2
Building Identity Abstraction Layer: Provider-Agnostic Authentication
May 30, 2026 · 7 min read
- 3
How Identity Provider Bridging Works: SAML-to-OIDC Token Translation
May 26, 2026 · 6 min read
- 4
Building Identity Orchestration: Connecting Multiple IdPs with Custom Workflows
May 29, 2026 · 8 min read
Series · 4 parts
OAuth 2.0 & OIDC Mastery
- 1
OAuth 2.0 Explained: Roles, Tokens & Trust Boundaries
May 21, 2024 · 10 min read
- 2
Securing OAuth2 Bearer Token Usage: RFC 6750 Best Practices
May 30, 2026 · 6 min read
- 3
Understanding OAuth2 Multiple Response Types: A Technical Guide
May 29, 2026 · 6 min read
- 4
Understanding OAuth 2.0 Rich Authorization Requests (RAR)
May 27, 2026 · 6 min read
Series · 6 parts
Frontend Identity Integration
- 1
OpenID Connect Frontend and Backend Integration Guide
May 29, 2026 · 6 min read
- 2
React Authentication with Auth0 and OIDC: A Developer Guide
May 26, 2026 · 6 min read
- 3
Building Secure Micro-Frontends with OIDC and Token Mediation
May 27, 2026 · 6 min read
- 4
Identity Architecture Patterns for Micro-Frontends and Multi-Platform
May 27, 2026 · 8 min read
Series · 2 parts
Identity & Access Management Series
Series · 11 parts
Machine Identity & DevSecOps Series
- 1
Building a Custom UserDetailsService with Spring Security
May 25, 2026 · 6 min read
- 2
Spring Security and GraphQL: Securing GraphQL APIs
May 25, 2026 · 6 min read
- 3
Machine Identity Management: The Hidden Attack Surface
May 26, 2026 · 6 min read
- 4
GitOps Security: Protecting Kubernetes Secrets and Configuration
May 25, 2026 · 6 min read
Series · 15 parts
AWS IAM & Cloud Security Series
- 1
The Future of Authentication: Passkeys, AI, and Passwordless in 2025
May 24, 2026 · 7 min read
- 2
AWS IAM Fundamentals: Users, Roles, Policies, and Best Practices
May 24, 2026 · 8 min read
- 3
AWS IRSA: Fine-Grained Pod Identity for EKS
May 24, 2026 · 6 min read
- 4
AWS STS: AssumeRole, Federation, and Temporary Credentials
May 24, 2026 · 6 min read
Series · 10 parts
Passwordless & Next-Gen Authentication Series
- 1
Security Architecture Review: Patterns for Identity-First Design
May 24, 2026 · 6 min read
- 2
Passwordless Authentication: The Complete Implementation Guide
May 24, 2026 · 8 min read
- 3
FIDO2 and WebAuthn: Building Phishing-Resistant Authentication
May 24, 2026 · 6 min read
- 4
Passkeys Guide: Google, Apple, Microsoft Ecosystems
May 24, 2026 · 6 min read
Series · 10 parts
Zero Trust & Modern Security Architecture Series
- 1
Securing Keycloak: Hardening Guide for Production
May 23, 2026 · 6 min read
- 2
Zero Trust Architecture: A Practical Implementation Guide
May 23, 2026 · 6 min read
- 3
Identity Threat Detection and Response (ITDR): The New Security Frontier
May 23, 2026 · 8 min read
- 4
BeyondTrust: Building a Zero Trust Identity Framework
May 23, 2026 · 6 min read
Series · 10 parts
SAML Mastery Series
- 1
SAML 2.0 Explained: The Complete Guide to Enterprise SSO
May 22, 2026 · 6 min read
- 2
Configuring SAML SSO: Service Provider Setup Guide
May 22, 2026 · 6 min read
- 3
SAML vs OAuth 2.0 vs OIDC: Which Protocol to Choose in 2025
May 22, 2026 · 8 min read
- 4
Troubleshooting SAML: Common Issues and Fixes
May 22, 2026 · 6 min read