DEV Community

#apisecurity

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
alf.io's API key role bug is a privilege-model problem
andreagomez profile

alf.io's API key role bug is a privilege-model problem

#ticketing #apisecurity #authorization
Comments
3 min read
Enhancing GitHub API Security: Why Sub-tokens Are Essential for Modern Software Development Reports
devactivity profile
Oleg

Enhancing GitHub API Security: Why Sub-tokens Are Essential for Modern Software Development Reports

#github #apisecurity #leastprivilege #devops
Comments
4 min read
FreshRSS API passwords create a second access path
andreagomez profile

FreshRSS API passwords create a second access path

#zoomeye #freshrss #apisecurity #feedreader
Comments
2 min read
LocalAI API exposure and the model-management control plane
johnettagaweraks profile

LocalAI API exposure and the model-management control plane

#zoomeye #localai #aisecurity #apisecurity
Comments
3 min read
Gatus status pages: public observability versus authenticated API control
sorrelthorncroft profile

Gatus status pages: public observability versus authenticated API control

#zoomeye #gatus #observability #apisecurity
Comments
3 min read
Documenso discovery and the team-scoped signing API boundary
johnettagaweraks profile

Documenso discovery and the team-scoped signing API boundary

#zoomeye #documenso #assetinventory #apisecurity
Comments
3 min read
Deploying a Small Python API Responsibly
dhaarani_dhanasekeran_635 profile

Deploying a Small Python API Responsibly

#pythonapi #apisecurity #flask #logging
Comments
3 min read
YetiForce application matches outnumber visible titles
stark_zhuang_df5076f35c68 profile

YetiForce application matches outnumber visible titles

#zoomeye #crm #apisecurity
Comments
3 min read
OpenAPI security schemes describe credentials while servers enforce authorization
bianliang profile

OpenAPI security schemes describe credentials while servers enforce authorization

#apisecurity #openapi #authorization
Comments
3 min read
HTTP Message Signatures need a canonical request, not a collection of headers
jeffreyciend profile

HTTP Message Signatures need a canonical request, not a collection of headers

#http #messagesignatures #apisecurity
Comments
3 min read
Northflank Breach Exposes AI API Keys
randomchaos profile
RC

Northflank Breach Exposes AI API Keys

#northflank #apisecurity #aiinfrastructure
Comments
3 min read
API Returns Too Much Data? The Window Envelope Call
blixwerk_7cdf1919283d2fab profile

API Returns Too Much Data? The Window Envelope Call

#apisecurity #checklist #codereview #express
Comments
4 min read
Traefik dashboard discovery should start with the insecure API setting
facilishz profile

Traefik dashboard discovery should start with the insecure API setting

#zoomeye #traefik #dashboard #apisecurity
Comments
3 min read
Asked to Review API Security, Don't Know Where to Start?
blixwerk_7cdf1919283d2fab profile

Asked to Review API Security, Don't Know Where to Start?

#apisecurity #checklist #codereview #express
Comments
4 min read
API Authentication Failures: Checks to Run Before You Blame the Rate Limiter
stark_zhuang_df5076f35c68 profile

API Authentication Failures: Checks to Run Before You Blame the Rate Limiter

#apisecurity #authorization #owasp #ratelimiting
Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.