DEV Community

#oidc

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Make GitHub Actions OIDC trust depend on the claims you can enforce

Make GitHub Actions OIDC trust depend on the claims you can enforce

Comments
3 min read
Vercel's Nov 30 "Not secure" label: what Marketplace API vendors actually need to build

Vercel's Nov 30 "Not secure" label: what Marketplace API vendors actually need to build

Comments
3 min read
Vercel wants static credentials gone. Its own GitHub Actions deploy still needs one

Vercel wants static credentials gone. Its own GitHub Actions deploy still needs one

Comments
4 min read
Keycloak Step-Up Authentication: ACR, LoA Flows and the Cookie Bypass Gap

Keycloak Step-Up Authentication: ACR, LoA Flows and the Cookie Bypass Gap

Comments
7 min read
Pure BFF & Token Handler Architecture: The Ultimate OIDC / OAuth 2.0 Security Guide for SPAs

Pure BFF & Token Handler Architecture: The Ultimate OIDC / OAuth 2.0 Security Guide for SPAs

Comments
15 min read
OIDC: Keycloak JWT Federation

OIDC: Keycloak JWT Federation

Comments
8 min read
Moving Supabase users to Open Source Cloud without resetting their passwords

Moving Supabase users to Open Source Cloud without resetting their passwords

Comments
6 min read
npm trusted publishing finally covers dist-tags, if you ask nicely

npm trusted publishing finally covers dist-tags, if you ask nicely

Comments
5 min read
How Enterprise SSO Actually Works

How Enterprise SSO Actually Works

Comments
6 min read
OIDC: AWS OIDC Federation

OIDC: AWS OIDC Federation

Comments
4 min read
How to secure a Java client application with OpenID Connect (using Spring Boot)

How to secure a Java client application with OpenID Connect (using Spring Boot)

Comments
7 min read
GitHub Actions + Infisical OIDC: Secretless CI for All Your Repos (and the Wildcard Trap)

GitHub Actions + Infisical OIDC: Secretless CI for All Your Repos (and the Wildcard Trap)

1
Comments
9 min read
One client, four registries: PyPI, npm, Packagist and MCP all disagree

One client, four registries: PyPI, npm, Packagist and MCP all disagree

Comments 1
4 min read
Stop Minting Static Credentials

Stop Minting Static Credentials

Comments 1
15 min read
How to secure a Spring Security client application with OIDC (using pac4j)

How to secure a Spring Security client application with OIDC (using pac4j)

Comments
10 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.