Recently, I worked on an Expo app for people who suffer from reduced hand dexterity. I thought: why not set up passwordless authentication?
I researched a script that prompts a user for an MFA token in AWS if it’s needed and sets a temporary user session in the credentials file.
For user access, AWS Cognito is a good choice for authentication and authorization. But when only machines are involved, AWS IAM may be a better fit.
Our team recently modified a login page that allowed for toggling authentication providers. In this post, I'll describe how we implemented it.
Postman authentication tokens expire after fifteen minutes — a pain for longer sessions. So here's our method for automating token requests.
Part two of a series on extending Dropwizard with custom authentication, authorization, and multitenancy. Covers Dropwizard authorization.
Part one of a series on extending Dropwizard with custom authentication, authorization, and multitenancy. Covers adding custom authentication to Dropwizard.
A comparison of OpenID, OAuth2, and SAML for user authentication and authorization – how they work, security risks, and best use cases.
Rails recently added a constraints option to routes which allows you to dynamically define routes based on the request coming in.
This post collects some of the articles and code snippets I tracked down while researching how to secure a CouchDB server.
I came across a few Ruby libraries for connecting to Active Directory, but I used net-ldap gem, the environment_configurable gem and a few lines of code.