DEV Community

#oauth

OAuth flow implementation details

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Supercharging DeepSeek Harness: Bringing Claude Pro/Max with One-Click Google/Gmail OAuth Login and Real-Time Quota Tracking
ofek_v_de88401ddceb10ae59 profile
ofek v

Supercharging DeepSeek Harness: Bringing Claude Pro/Max with One-Click Google/Gmail OAuth Login and Real-Time Quota Tracking

#opensource #claude #ai #oauth
1
Comments
5 min read
Seven ways a remote MCP server gets authorization wrong
guybrushulyssesthreepwood profile

Seven ways a remote MCP server gets authorization wrong

#mcp #security #oauth #ai
Comments
5 min read
The confused deputy, or why "just forward the token" breaks your MCP server
guybrushulyssesthreepwood profile

The confused deputy, or why "just forward the token" breaks your MCP server

#security #oauth #mcp #architecture
Comments
3 min read
OAuth 2.1 for MCP servers, done properly
guybrushulyssesthreepwood profile

OAuth 2.1 for MCP servers, done properly

#oauth #mcp #security #api
Comments
4 min read
Error 400: redirect_uri_mismatch, explained character by character
arling profile
ARLing

Error 400: redirect_uri_mismatch, explained character by character

#oauth #google #nextjs #webdev
Comments
5 min read
Google OAuth 2.0 for Developers: Implementation, Security Best Practices, and Troubleshooting
corsairdev profile

Google OAuth 2.0 for Developers: Implementation, Security Best Practices, and Troubleshooting

#oauth
Comments
13 min read
ANAF SPV E-Invoicing from Java/Spring Boot: OAuth2, JWT Access Tokens, and a Refresh Window That Never Rests
fiscal-link profile

ANAF SPV E-Invoicing from Java/Spring Boot: OAuth2, JWT Access Tokens, and a Refresh Window That Never Rests

#api #java #oauth #springboot
Comments
7 min read
Supabase OAuth redirects to localhost in production: the allow-list rule nobody reads
arling profile
ARLing

Supabase OAuth redirects to localhost in production: the allow-list rule nobody reads

#supabase #nextjs #oauth #webdev
1
Comments
4 min read
OAuth Consent Phishing: The Attack a Password Change Does Not Fix
tuxxin profile

OAuth Consent Phishing: The Attack a Password Change Does Not Fix

#security #oauth #phishing #fbi
Comments
4 min read
Oauth 2.0 implementation for servicenow applications
kiran_vedagiri_ae39372758 profile

Oauth 2.0 implementation for servicenow applications

#servicenow #connoection #oauth #secure
Comments
8 min read
A provisioned Keycloak client inherits no PKCE pin, and the obvious fix is inert
marcos_sousa profile

A provisioned Keycloak client inherits no PKCE pin, and the obvious fix is inert

#keycloak #oauth #mcp #clientpolicy
1
Comments
6 min read
A browser I never opened logged me in — as the wrong person
jun_uen0 profile
Jun

A browser I never opened logged me in — as the wrong person

#oauth #gas #automation
1
Comments
3 min read
Refresh Token Rotation Under the Hood: How Auth0 Catches a Stolen Token Before It's Ever Replayed
mukesh_13 profile

Refresh Token Rotation Under the Hood: How Auth0 Catches a Stolen Token Before It's Ever Replayed

#oauth #auth0 #security #webdev
Comments
4 min read
Twitch Accepts Invalid Keys and Silently Discards Them — The Hidden Pitfalls of Integration and a 41-Second Recovery
orca_forge profile

Twitch Accepts Invalid Keys and Silently Discards Them — The Hidden Pitfalls of Integration and a 41-Second Recovery

#twitch #oauth #sre
Comments
10 min read
OAuth Failure Recovery: Why I Choose Safe Retries for Authorization and Callback Steps
wilhelmknight8435 profile

OAuth Failure Recovery: Why I Choose Safe Retries for Authorization and Callback Steps

#oauth #authentication #backend #security
Comments
7 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.