DarkEdges - DEV Community

DarkEdges

Nov 3

Building a Federated Copilot: Part 6, Ionic React, Fingerprints and Persistent Sessions

#android #react #security #ai

9 min read

DarkEdges

Nov 3

Building a Federated Copilot: Part 5, SharePoint Documents Without External Entra Users

#ai #security #microsoft #architecture

7 min read

DarkEdges

Nov 3

Building a Federated Copilot: Part 4, Making Copilot Studio Accept the Right Token

#ai #security #oauth #microsoft

7 min read

DarkEdges

Nov 3

Building a Federated Copilot: Part 3, Consent, Revocation and Vault

#security #oauth #vault #typescript

6 min read

DarkEdges

Nov 3

Building a Federated Copilot: Part 2, Real PingFederate Token Exchange

#security #oauth #docker #typescript

5 min read

DarkEdges

Nov 3

Building a Federated Copilot: Part 1, Identity Before Integration

#security #ai #oauth #typescript

6 min read

DarkEdges

Nov 3

Letting AI agents act for users: the RFC 8693 token exchange

#identity #oauth #ai #entra

1

6 min read

DarkEdges

Nov 3

Open items for agent identity in Entra, and how to run the stack

#identity #entra #ai #devops

5 min read

DarkEdges

Nov 3

What the real Entra tenant taught us that the mock did not

#entra #azure #identity #lessons

5 min read

DarkEdges

Nov 3

Matching a directory entry to an Entra token, without turning on sync

#activedirectory #entra #identity #samba

6 min read

DarkEdges

Nov 3

How the broker gets an Entra token for an agent

#entra #oauth #identity #ai

5 min read

DarkEdges

Oct 25

Missions, consent and three tokens: how the AAuth person server decides

#security #authorization #oauth #javascript

5 min read

DarkEdges

Oct 25

Call chaining in AAuth: passing authority on with upstream tokens

#security #authorization #oauth #distributedsystems

5 min read

DarkEdges

Oct 25

Paying for it, and checking AAuth against a real person server

#security #authorization #javascript #cloudflare

5 min read

DarkEdges

Oct 25

Signed requests and agent identity in AAuth

#security #authorization #javascript #http

5 min read

DarkEdges

Oct 24

Delegating work across companies with AAuth

#security #authorization #javascript #cloudflare

5 min read

DarkEdges

Oct 24

Same lab, different protocol: rebuilding the Biscuit trust lab on AAuth

#security #oauth #javascript

1

6 min read

DarkEdges

Oct 4

Step-up MFA, attenuation, and what's honestly not done

#security #authorization #pingfederate #datalog

6 min read

DarkEdges

Oct 4

Configuring PingFederate token exchange with Terraform, and testing it end to end

#pingfederate #terraform #oauth #rust

6 min read

DarkEdges

Oct 4

Building a PingFederate token generator that mints Biscuits

#pingfederate #java #security #oauth

7 min read

DarkEdges

Oct 4

Who mints the first Biscuit? PingFederate, token exchange and a hybrid model

#pingfederate #oauth #security #authorization

6 min read

DarkEdges

Oct 4

Credits without a mutable token: reservations, idempotency and receipts

#security #javascript #distributedsystems #cloudflare

5 min read

DarkEdges

Oct 4

Local policy, shared facts: the receiver's Datalog authorizer

#security #authorization #datalog #javascript

4 min read

DarkEdges

Oct 4

Attenuating Biscuit tokens and signing the delegation chain

#security #authorization #javascript #webassembly

5 min read

DarkEdges

Oct 4

Delegating authority across companies with Biscuit tokens

#security #authorization #javascript #cloudflare

5 min read

DarkEdges

Oct 1

Run It, Deploy It, and What's Honestly Not Done Yet

#pingfederate #go #terraform #kubernetes

2 min read

DarkEdges

Oct 1

Securing the Token Vault: Encrypted State, Refresh Rotation and Safe Logs

#go #security #encryption #oauth

2 min read

DarkEdges

Oct 1

Introspection and Delegations: Authorising Agents Per User, Per Operation

#pingfederate #oauth #api #security

3 min read

DarkEdges

Oct 1

PingFederate as a Token Courier: Linking Entra with the Reference ID Adapter

#pingfederate #oauth #microsoft #security

2 min read

DarkEdges

Oct 1

Agents Should Never Hold Your Tokens: A PingFederate to Microsoft Graph Broker

#pingfederate #security #ai #go

1

3 min read

DarkEdges

Sep 7

Custom ID-JAG on PingFederate, Part 4: Testing Live Issuance Without Overclaiming

#testing #oauth #security #terraform

4 min read

DarkEdges

Sep 7

Custom ID-JAG on PingFederate, Part 3: Managing the Integration with Terraform

#terraform #devops #oauth #security

4 min read

DarkEdges

Sep 7

Custom ID-JAG on PingFederate, Part 2: Building the Generator and Handling Runtime Constraints

#java #oauth #security #identity

4 min read

DarkEdges

Sep 7

Custom ID-JAG on PingFederate, Part 1: Can PingFederate 12.3.3 Issue an ID-JAG?

#oauth #security #java #identity

4 min read

DarkEdges

Aug 30

Building One Tap for PingFederate, Part 3: An Automated Narrated Demo Video

#playwright #python #ai #devops

3 min read

DarkEdges

Aug 30

Building One Tap for PingFederate, Part 2: Docker, Terraform, and OIDC with PKCE

#terraform #docker #oidc #pingidentity

3 min read

DarkEdges

Aug 30

Building One Tap for PingFederate, Part 1: Architecture and the Secure Account Bridge

#pingidentity #oidc #authentication #architecture

5 min read

DarkEdges

Aug 23

Trusted AI Agent Transactions, Part 5: End-to-End Proof

#go #pingidentity #mcp #security

3 min read

DarkEdges

Aug 23

Trusted AI Agent Transactions, Part 4: PingAuthorize Policy Decisions

#pingauthorize #security #authorization #ai

2 min read

DarkEdges

Aug 23

Trusted AI Agent Transactions, Part 3: SPIRE Workload Identity

#spiffe #spire #security #ai

2 min read

DarkEdges

Aug 23

Trusted AI Agent Transactions, Part 2: PingFederate Token Exchange

#pingfederate #oauth #security #ai

5 min read

DarkEdges

Aug 23

Trusted AI Agent Transactions, Part 1: The Identity Problem

#security #oauth #ai #pingidentity

1

2 min read

DarkEdges

Aug 7

My detector caught the attacker and never once stopped it, and reported PASS

#security #debugging #testing #architecture

6 min read

DarkEdges

Aug 7

A graduated response ladder where every rung is invisible

#security #api #architecture #opa

6 min read

DarkEdges

Aug 7

Honeytokens that recognise themselves: stateless decoys with automatic attribution

#security #api #cryptography #architecture

5 min read

DarkEdges

Aug 7

Four ways a baseline quietly destroys the anomaly detector built on it

#security #machinelearning #debugging #architecture

5 min read

DarkEdges

Aug 7

Three detection layers that disagree usefully, and why they combine by max, not sum

#security #machinelearning #architecture #typescript

7 min read

DarkEdges

Aug 7

The most obvious signals for detecting enumeration don't work

#security #api #datascience #architecture

6 min read

DarkEdges

Aug 7

Simulating attackers is easy. Simulating legitimate users is the hard part

#security #api #testing #architecture

6 min read

DarkEdges

Aug 7

Your API is being enumerated by a client with a perfectly valid token

#security #api #architecture #typescript

1

5 min read

DarkEdges

Jul 29

Cross-App Access Without Leaking Credentials: A Hands-On ID-JAG POC

#oauth #security #springboot #nextjs

2 min read

DarkEdges

Jul 26

Proving Zero Trust Actually Works: Entra ID + Cloudflare Access over Both OIDC and SAML

#azure #terraform #security #cloudflare

5 min read

DarkEdges

Jul 7

From vexctl scripts to a governed VEX platform: building vex-ui with Next.js, keyless signing, and a Trivy-consumable repo

#security #nextjs #devops #supplychain

5 min read

DarkEdges

Jun 28

Building CIS-Hardened, SBOM-Attested CentOS 9 Golden Images with Packer, QEMU and PingAccess - entirely on WSL2

#devsecops #packer #supplychainsecurity #linux

6 min read

DarkEdges

Jun 13

VEX demo update: adding Docker Scout attestations (and three new gotchas)

#docker #security #devops #tutorial

5 min read

DarkEdges

Jun 13

From 70 CVEs to 0: a hands-on VEX suppression workflow with Trivy (and a path to Wiz)

#docker #security #devops #tutorial

5 min read

DarkEdges

May 27

Deploy Ping Identity Products on Kubernetes with a Single Operator

#kubernetes #pingidentity #operator #helm

6 min read

DarkEdges

Apr 29

From Laptop to Cluster: Running darkedges-entraid-tokenexchange with Docker and Kubernetes

#devops #docker #kubernetes #tutorial

4 min read

DarkEdges

Apr 20

PingFederate Token Exchange Processor Policy

#azure #backend #infosec #security

12 min read

DarkEdges

Apr 12

Weekend Build Recap: Trust-Aware API Access with OpenID Federation

#showdev #api #devjournal #security

2 min read

Two Year Club

One Year Club

Writing Debut