Using Buildkite OIDC with Hashicorp Vault
A technical guide on integrating Buildkite's OIDC tokens with Hashicorp Vault for secure, credential-less CI/CD secret management.
A technical guide on integrating Buildkite's OIDC tokens with Hashicorp Vault for secure, credential-less CI/CD secret management.
A tutorial on building a user registration, login, and management (CRUD) application using Next.js 13 with the App Router, TypeScript, React, and MongoDB.
A review of senpai, a modern terminal-based IRC client, focusing on its features, configuration, and integration with an IRC bouncer.
Guide to configuring the angular-auth-oidc-client library using Angular's new functional APIs for providers, interceptors, and guards.
Troubleshooting guide for Windows Hello for Business Cloud Kerberos Trust enrollment issues, focusing on missing Cloud TGT.
Microsoft Authenticator's new number matching feature combats MFA fatigue attacks by requiring users to enter a code during sign-in.
How to fix the AD FS error 'None of the UPNs were successful for S4U Logon call' related to the Protected Users group.
A guide on securing Angular SPAs by shifting authentication to a Duende BFF backend, moving away from the Implicit flow to the more secure PKCE flow.
A developer discusses implementing multi-tenancy access control in a Blazor WASM and ASP.NET Core API, covering authentication, claims transformation, and tenant identification.
Explores a multi-tenancy security design pattern: external authentication with local authorization, using IDP tokens and SAGA for signup.
Troubleshooting guide for fixing 'Your credentials did not work' error during authentication on an Azure AD Joined machine in a federated domain.
A guide to using Playwright's new authentication API for testing with multiple user roles, featuring configuration updates and code examples.
A technical guide on implementing multi-tenancy in Keycloak using a single realm and client, focusing on user attributes and client scopes.
Microsoft's new number matching MFA feature impacts Remote Desktop Gateway with NPS extension, requiring a registry workaround.
A technical comparison of session-based and token-based authentication methods, with implementation examples and best practices for Node.js.
A technical guide explaining how to implement TOTP-based two-factor authentication, including code examples in Python and Hare.
Discusses security risks in Angular HTTP interceptors, especially when exposing authentication tokens, and provides examples from common implementations.
A technical guide on setting up and using a Yubikey hardware token for GPG encryption and signing, covering key generation and smart card configuration.
A comprehensive guide to implementing OAuth 2.0 authorization with multiple providers (Google, GitHub, Amazon) in a Node.js backend using Passport.js.
Guide on using OIDC authentication with Terraform's AzureRM backend to secure GitHub Actions workflows and manage storage permissions.