DEV Community

#oauth

OAuth flow implementation details

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
ANAF SPV E-Invoicing from Java/Spring Boot: OAuth2, JWT Access Tokens, and a Refresh Window That Never Rests

ANAF SPV E-Invoicing from Java/Spring Boot: OAuth2, JWT Access Tokens, and a Refresh Window That Never Rests

Comments
7 min read
OAuth Consent Phishing: The Attack a Password Change Does Not Fix

OAuth Consent Phishing: The Attack a Password Change Does Not Fix

Comments
4 min read
OAuth 2.0, OpenID Connect, and a Browser SPA: How Identity Server and SPA App Talk

OAuth 2.0, OpenID Connect, and a Browser SPA: How Identity Server and SPA App Talk

Comments
6 min read
Oauth 2.0 implementation for servicenow applications

Oauth 2.0 implementation for servicenow applications

Comments
8 min read
A provisioned Keycloak client inherits no PKCE pin, and the obvious fix is inert

A provisioned Keycloak client inherits no PKCE pin, and the obvious fix is inert

1
Comments
6 min read
A browser I never opened logged me in — as the wrong person

A browser I never opened logged me in — as the wrong person

1
Comments
3 min read
Refresh Token Rotation Under the Hood: How Auth0 Catches a Stolen Token Before It's Ever Replayed

Refresh Token Rotation Under the Hood: How Auth0 Catches a Stolen Token Before It's Ever Replayed

Comments
4 min read
Twitch Accepts Invalid Keys and Silently Discards Them — The Hidden Pitfalls of Integration and a 41-Second Recovery

Twitch Accepts Invalid Keys and Silently Discards Them — The Hidden Pitfalls of Integration and a 41-Second Recovery

Comments
10 min read
OAuth Failure Recovery: Why I Choose Safe Retries for Authorization and Callback Steps

OAuth Failure Recovery: Why I Choose Safe Retries for Authorization and Callback Steps

Comments
7 min read
How to Plug Claude Routines Into Your SaaS With MCP

How to Plug Claude Routines Into Your SaaS With MCP

Comments
8 min read
Your AI-built app connects to Gmail. Six things that have to hold before launch (2026)

Your AI-built app connects to Gmail. Six things that have to hold before launch (2026)

Comments
5 min read
No More Human Needed to Press the Stream Button — How to Create Unmanned Streaming on YouTube/Twitch

No More Human Needed to Press the Stream Button — How to Create Unmanned Streaming on YouTube/Twitch

Comments
10 min read
Why Authentication Is Becoming a Core Product Decision in the Age of AI Agents

Why Authentication Is Becoming a Core Product Decision in the Age of AI Agents

Comments
4 min read
How I Handle OAuth2 Token Refresh and Quotas in a Django API Gateway

How I Handle OAuth2 Token Refresh and Quotas in a Django API Gateway

Comments
4 min read
Patient Portal Login With Convenient Authorization and Explicit Data Consent

Patient Portal Login With Convenient Authorization and Explicit Data Consent

Comments
8 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.