DEV Community

#oidc

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Make GitHub Actions OIDC trust depend on the claims you can enforce

Make GitHub Actions OIDC trust depend on the claims you can enforce

3 min read
Vercel's Nov 30 "Not secure" label: what Marketplace API vendors actually need to build

Vercel's Nov 30 "Not secure" label: what Marketplace API vendors actually need to build

3 min read
Vercel wants static credentials gone. Its own GitHub Actions deploy still needs one

Vercel wants static credentials gone. Its own GitHub Actions deploy still needs one

4 min read
Keycloak Step-Up Authentication: ACR, LoA Flows and the Cookie Bypass Gap

Keycloak Step-Up Authentication: ACR, LoA Flows and the Cookie Bypass Gap

7 min read
Pure BFF & Token Handler Architecture: The Ultimate OIDC / OAuth 2.0 Security Guide for SPAs

Pure BFF & Token Handler Architecture: The Ultimate OIDC / OAuth 2.0 Security Guide for SPAs

15 min read
OIDC: Keycloak JWT Federation

OIDC: Keycloak JWT Federation

8 min read
Moving Supabase users to Open Source Cloud without resetting their passwords

Moving Supabase users to Open Source Cloud without resetting their passwords

6 min read
npm trusted publishing finally covers dist-tags, if you ask nicely

npm trusted publishing finally covers dist-tags, if you ask nicely

5 min read
How Enterprise SSO Actually Works

How Enterprise SSO Actually Works

6 min read
OIDC: AWS OIDC Federation

OIDC: AWS OIDC Federation

4 min read
How to secure a Java client application with OpenID Connect (using Spring Boot)

How to secure a Java client application with OpenID Connect (using Spring Boot)

7 min read
GitHub Actions + Infisical OIDC: Secretless CI for All Your Repos (and the Wildcard Trap)

GitHub Actions + Infisical OIDC: Secretless CI for All Your Repos (and the Wildcard Trap)

1
9 min read
One client, four registries: PyPI, npm, Packagist and MCP all disagree

One client, four registries: PyPI, npm, Packagist and MCP all disagree

1
4 min read
Stop Minting Static Credentials

Stop Minting Static Credentials

1
15 min read
How to secure a Spring Security client application with OIDC (using pac4j)

How to secure a Spring Security client application with OIDC (using pac4j)

10 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.