Authorization - DEV Community

Skip to content

DEV Community

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Auth By Example

Oct 5

A valid token is not an AI agent audit trail

#security #ai #authorization #compliance

1 min read

DarkEdges

Oct 4

Who mints the first Biscuit? PingFederate, token exchange and a hybrid model

#pingfederate #oauth #security #authorization

6 min read

DarkEdges

Oct 4

Step-up MFA, attenuation, and what's honestly not done

#security #authorization #pingfederate #datalog

6 min read

DarkEdges

Oct 4

Attenuating Biscuit tokens and signing the delegation chain

#security #authorization #javascript #webassembly

5 min read

DarkEdges

Oct 4

Local policy, shared facts: the receiver's Datalog authorizer

#security #authorization #datalog #javascript

4 min read

DarkEdges

Oct 4

Delegating authority across companies with Biscuit tokens

#security #authorization #javascript #cloudflare

5 min read

Auth By Example

Sep 28

AI agents that inherit your OAuth token break least privilege

#authorization #ai #security #oauth

1 min read

Sanskriti Harmukh for Vultr

Sep 30

Deploying Ory Keto - Open-Source Permission and Access Control Server

#security #docker #devops #authorization

12 min read

yutianle

Sep 25

Authorization at the Object Level: Testing for BOLA Before Someone Else Does

#apisecurity #authorization #bola #owasp

4 min read

Auth By Example

Sep 24

OAuth on MCP is not the same as authorizing each tool call

#security #mcp #api #authorization

1 min read

Auth By Example

Sep 23

Read permission is not export permission

#security #authorization #api #webdev

1 min read

kozhevniko

Sep 21

API Security: The Attack Surface That Grows Without a Firewall

#apisecurity #owasp #authorization

2 min read

Sep 21

ABAC in Production: What Actually Breaks

#security #architecture #authorization #go

4 min read

Auth By Example

Sep 19

Pull the tenant from the auth context, not the request body

#security #webdev #beginners #authorization

1 min read

Auth By Example

Sep 18

Never trust a client-supplied tenant ID

#security #webdev #beginners #authorization

1 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.