Install
Identity, Auth & Access
OAuth/OIDC, SSO, policy engines, and permissions at scale.
- 8 Tracked terms
- Last 30 days Feed window
What this topic collects on
An article joins this feed when it matches these terms. Each one is also a search of its own.
Related topics
Latest in Identity, Auth & Access
Permissions and Authorisation: A Practical Playbook
3+ hour, 47+ min ago (808+ words) Authorisation is a domain capability, not a collection of scattered endpoint conditionals. For every protected operation, decide consistently whether a verified principal may perform a business action on a specific resource in a defined context—and enforce that decision server-side…...
Securely Authenticate Users with the Telegram Login Widget in PHP and Yii2
10+ hour, 23+ min ago (222+ words) This guide demonstrates how to build a secure backend validator in PHP to verify the Telegram Login Widget payload using HMAC-SHA-256, enforce strict expiration checks on the authentication timestamp, and map the validated Telegram ID to a user record in…...
Who watches the watchmen? Sam Altman's pledge is really an identity management problem
2+ day, 15+ hour ago (691+ words) After Sam Altman announced that OpenAI will adopt the model Anthropic proposed and grant outside overseers "employee-level access" to its development systems, Israel Duanis, CEO of Linx Security, writes that, "the security pledge is only as good as the infrastructure…...
You Protected the API… But Your JavaScript Is Telling Everyone Your Secrets
1+ day, 8+ hour ago (30+ words) The Frontend Security Mistake I Keep Seeing in Enterprise Applications “We secured the APIs behind an Identity Provider …...
Separate who can grant from who can act
2+ day, 7+ hour ago (90+ words) In many apps, anyone with an “admin” role can both use privileged actions and hand those same powers to other people. That mixes two different privileges: If the same role covers both, a compromised admin account — or a confused admin…...
SPL Token Was Replaced In Place: p-token, Explained
2+ day, 10+ hour ago (844+ words) Every token you have ever held on Solana that is not Token-2022 lives under one program: the classic Tokenkeg… address. It is the most-called program on the chain, it has not materially changed in years, and most people assume it…...
2,967 MCP servers advertise OAuth. 8% meet the July spec.
3+ day, 20+ hour ago (380+ words) I scanned every server in the official MCP registry and checked the ones that advertise OAuth against the 2026-07-28 authorization requirements. Read-only throughout: one initialize per host to see what it answers, then public metadata documents. No tool calls, no auth…...
Authentication vs Authorization: The Distinction Most Developers Get Wrong
3+ day, 18+ hour ago (338+ words) Two words. Nearly identical spelling. Completely different jobs in your system. If you’ve ever returned a 401 when you …...
Hexnode unveils Hexnode Synapse, bringing agentic orchestration to IT and security operations
4+ day, 18+ hour ago (454+ words) 16 Sep, 2026, 08:00 GMT MUNICH, Sept. 16, 2026 /PRNewswire/ -- Hexnode, the enterprise software division of Mitsogo, today introduced Hexnode Synapse at HexCon26, its annual user conference. Hexnode Synapse is an agentic orchestration layer for IT and security operations designed to turn requests and system events…...
Build zero-trust AI agents that judge intent, not just syntax
5+ day, 9+ hour ago (717+ words) Part 2 of Zero-trust Agents series: runtime governance, intent gating, and adaptive anomaly remediation In Part 1, we established three deterministic controls for autonomous agents: signed database writes with Cloud KMS, user-space kernel isolation with gVisor, and an input/output gateway backed…...