BestHub
Sign in
Tagged articles

authentication

695 articles · Page 2 of 7
IT Services Circle
IT Services Circle
Sep 22, 2025 · Information Security

JWT vs Token+Redis: Which Authentication Strategy Wins for Your Apps?

This article provides a comprehensive comparison of JWT and Token‑Redis authentication schemes, covering their underlying principles, Java implementations, advantages and disadvantages, performance and security trade‑offs, suitable use‑cases, and practical guidance for choosing the optimal solution in modern web and mobile applications.

JWTRedisauthentication
0 likes · 15 min read
JWT vs Token+Redis: Which Authentication Strategy Wins for Your Apps?
Su San Talks Tech
Su San Talks Tech
Sep 19, 2025 · Information Security

JWT vs Token+Redis: Which Authentication Strategy Wins for Your Backend?

This article thoroughly compares JWT and Token‑plus‑Redis authentication approaches, detailing their underlying principles, Java implementations, performance, security trade‑offs, and ideal use‑cases, and even proposes a hybrid solution that combines the strengths of both methods for modern applications.

JWTauthenticationsecurity
0 likes · 16 min read
JWT vs Token+Redis: Which Authentication Strategy Wins for Your Backend?
Programmer XiaoFu
Programmer XiaoFu
Sep 15, 2025 · Information Security

SSO vs OAuth2.0: Key Differences Explained for Interviews

This article compares Single Sign‑On (SSO) and OAuth2.0, detailing their conceptual distinctions, token‑based workflows, implementation frameworks like CAS, the four OAuth2.0 grant types, and how each can be used to achieve seamless authentication across applications.

CASJWTOAuth2.0
0 likes · 8 min read
SSO vs OAuth2.0: Key Differences Explained for Interviews
Lobster Programming
Lobster Programming
Sep 13, 2025 · Information Security

Mobile SMS Verification Login: How It Works and How to Secure It

This article explains the workflow of mobile SMS verification login, outlines its main security risks such as code leakage, SMS bombing, and replay attacks, and provides practical mitigation strategies for developers and platform operators to protect user accounts.

SMS verificationauthenticationinformation security
0 likes · 6 min read
Mobile SMS Verification Login: How It Works and How to Secure It
Selected Java Interview Questions
Selected Java Interview Questions
Aug 25, 2025 · Information Security

Why 90% of Token Bugs Come from Renewal Mistakes – 5 Proven Solutions

Token renewal is a critical yet often misunderstood component of authentication, balancing security, user experience, and performance; this article examines common pitfalls, compares five practical strategies—including single‑token, double‑token, automatic renewal, and distributed solutions—and offers concrete best‑practice guidelines to avoid security holes and concurrency storms.

Token Renewalauthenticationbackend
0 likes · 10 min read
Why 90% of Token Bugs Come from Renewal Mistakes – 5 Proven Solutions
Java Captain
Java Captain
Aug 20, 2025 · Information Security

Build a Secure Spring Boot App in Minutes with Spring Security

This tutorial walks you through adding Spring Security to a Spring Boot project, from adding the starter dependency and creating a simple controller to observing the default login page, understanding the auto‑generated password mechanism, and customizing usernames and passwords for production use.

Spring Bootauthenticationauthorization
0 likes · 9 min read
Build a Secure Spring Boot App in Minutes with Spring Security
Su San Talks Tech
Su San Talks Tech
Aug 18, 2025 · Information Security

Mastering Token Renewal: 5 Strategies to Boost Security and Performance

This article explores the fundamentals of token renewal, analyzes common pitfalls, and presents five practical schemes—including single‑token, blacklist, double‑token, automatic renewal, and distributed‑environment solutions—while offering a comparison matrix, selection guidance, and best‑practice recommendations for secure, high‑performance authentication systems.

Token Renewalauthenticationbackend
0 likes · 10 min read
Mastering Token Renewal: 5 Strategies to Boost Security and Performance
Aikesheng Open Source Community
Aikesheng Open Source Community
Aug 7, 2025 · Databases

Unlock MySQL REST Service: Step‑by‑Step Installation and API Guide

This tutorial walks you through installing MySQL REST Service on Oracle Linux, configuring the metadata schema, using MySQL Shell in VS Code, loading the component, managing variables, handling X‑protocol settings, creating services, and authenticating via MRS, MySQL Internal, cookie or JWT, with full command‑line examples and code snippets.

MySQLMySQL ShellREST Service
0 likes · 17 min read
Unlock MySQL REST Service: Step‑by‑Step Installation and API Guide
Code Mala Tang
Code Mala Tang
Jul 24, 2025 · Information Security

Boost FastAPI Security: OAuth2, JWT, RBAC, Refresh Tokens & MFA

This guide explains how to secure FastAPI applications using OAuth2 with JWT, role‑based access control, refresh‑token workflows, multi‑factor authentication, and integration with external providers such as Auth0, Keycloak, and Firebase.

JWTMFAOAuth2
0 likes · 9 min read
Boost FastAPI Security: OAuth2, JWT, RBAC, Refresh Tokens & MFA
Architect
Architect
Jul 17, 2025 · Backend Development

Why Token Passing Is a Bad Idea and Better Alternatives for Microservice Calls

This article critiques the common practice of token passthrough for microservice authentication, explains why it hampers design and code reuse, and compares several internal call strategies—including Feign, Dubbo, Spring Boot Web with Dubbo, and K8s‑integrated approaches—highlighting their pros, cons, and best‑practice recommendations.

FeignGatewayauthentication
0 likes · 10 min read
Why Token Passing Is a Bad Idea and Better Alternatives for Microservice Calls
Ubiquitous Tech
Ubiquitous Tech
Jul 10, 2025 · Backend Development

How to Extend Spring AI MCP Server for Authentication and Authorization

This article walks through extending a Spring AI MCP Server to add authentication and authorization, comparing header‑based and parameter‑based schemes, showing the required Maven dependency, source code modifications, custom transport provider, interceptor integration, and testing the secured endpoints.

HTTP SSEMCPTTL
0 likes · 11 min read
How to Extend Spring AI MCP Server for Authentication and Authorization
JavaScript
JavaScript
Jul 9, 2025 · Information Security

How to Achieve a Seamless “Never‑Logout” Experience with Token Refresh

This article explains why short‑lived access tokens cause user interruptions, introduces the dual‑token authentication model with refresh tokens, and provides a complete Axios interceptor implementation that transparently renews tokens, handles concurrency, and gracefully logs out when refresh fails.

Frontendauthenticationaxios
0 likes · 9 min read
How to Achieve a Seamless “Never‑Logout” Experience with Token Refresh
macrozheng
macrozheng
Jul 7, 2025 · Backend Development

Mastering RBAC with Spring Security and JWT: A Hands‑On Guide

This article walks through the fundamentals of role‑based access control (RBAC), explains RBAC model variants, demonstrates how to configure Spring Security with in‑memory, database, and JWT authentication, and shows JSON‑based login and password encryption techniques for secure backend development.

JWTRBACauthentication
0 likes · 15 min read
Mastering RBAC with Spring Security and JWT: A Hands‑On Guide
Code Mala Tang
Code Mala Tang
Jul 7, 2025 · Backend Development

Secure FastAPI APIs with JWT: Step‑by‑Step Guide & Best Practices

This tutorial explains the fundamentals of JSON Web Tokens, their structure, how to encode them with base64Url, and provides a complete FastAPI implementation—including installation, token generation, verification, protected routes, and practical security recommendations—for building robust authentication in distributed systems.

JWTPythonauthentication
0 likes · 10 min read
Secure FastAPI APIs with JWT: Step‑by‑Step Guide & Best Practices
Java Backend Technology
Java Backend Technology
Jun 25, 2025 · Information Security

How to Seamlessly Refresh JWT Tokens: Backend and Frontend Strategies

This article explains why sudden logouts occur due to expired JWT tokens stored in Redis, and presents both backend automatic token renewal and frontend double‑token (access‑token and refresh‑token) approaches, complete with code examples, testing tips, and handling edge cases such as long‑idle form submissions.

JWTToken Refreshauthentication
0 likes · 10 min read
How to Seamlessly Refresh JWT Tokens: Backend and Frontend Strategies
Architect's Guide
Architect's Guide
Jun 23, 2025 · Information Security

Discover Sa-Token: The Most Feature‑Rich Java Authentication Framework

Sa-Token is a lightweight Java permission authentication framework that offers zero‑configuration login, comprehensive permission checks, session management, single sign‑on, OAuth2.0 support, distributed sessions, token customization, and many advanced features, with simple one‑line API calls illustrated by clear code examples.

Permissionauthenticationauthorization
0 likes · 7 min read
Discover Sa-Token: The Most Feature‑Rich Java Authentication Framework
Architecture Digest
Architecture Digest
Jun 20, 2025 · Backend Development

How to Implement Seamless Token Refresh in Java Backend with JWT

This article explains why silent token refresh is needed, outlines backend and front‑end strategies for automatically renewing JWTs, provides a complete Java implementation with Maven dependencies, utility methods, unit tests, and discusses handling edge cases such as long‑idle forms.

JWTSpringToken Refresh
0 likes · 10 min read
How to Implement Seamless Token Refresh in Java Backend with JWT
php Courses
php Courses
Jun 19, 2025 · Backend Development

Boost Your PHP Projects: Essential Features and Performance Optimizations

This article outlines key PHP functionalities such as user authentication, database optimization, file handling, frontend‑backend interaction, and error logging, and provides practical tips to improve security, performance, and overall quality of PHP web applications.

PHPauthenticationauthorization
0 likes · 6 min read
Boost Your PHP Projects: Essential Features and Performance Optimizations
JakartaEE China Community
JakartaEE China Community
Jun 16, 2025 · Backend Development

What New Features Does Jakarta EE 10 Introduce?

Jakarta EE 10 requires Java 11 (with optional Java 17 support) and brings a mix of minor and major updates across dozens of specifications, including new versions of Authentication, Concurrency, CDI, EL, JSON Binding, Security, Server Faces, Standard Tag Library, SOAP with Attachments, XML Binding, and a streamlined Core Profile for microservices.

CDIExpression LanguageJSON Binding
0 likes · 9 min read
What New Features Does Jakarta EE 10 Introduce?
Code Ape Tech Column
Code Ape Tech Column
Jun 12, 2025 · Information Security

How to Build Single Sign‑On (SSO) with CAS and Session Sharing in Java

This article explains why multiple independent login systems hurt user experience and security, reviews traditional session mechanisms and their limitations in clustered environments, and then presents two session‑sharing strategies and a complete CAS‑based SSO solution with Java code examples.

CASRedisSSO
0 likes · 15 min read
How to Build Single Sign‑On (SSO) with CAS and Session Sharing in Java
MaGe Linux Operations
MaGe Linux Operations
Jun 8, 2025 · Cloud Native

Master Kubernetes RBAC: A Complete Guide to Roles, Bindings, and Permissions

This comprehensive article explains Kubernetes security by detailing authentication types, authentication methods (HTTP Basic, Token, and HTTPS), the RBAC authorization model, and the definitions and practical examples of Role, ClusterRole, RoleBinding, and ClusterRoleBinding, helping readers implement fine‑grained access control in their clusters.

Cloud NativeDevOpsKubernetes
0 likes · 23 min read
Master Kubernetes RBAC: A Complete Guide to Roles, Bindings, and Permissions
Spring Full-Stack Practical Cases
Spring Full-Stack Practical Cases
Jun 6, 2025 · Backend Development

Secure Spring Boot 3 APIs: 5 Methods with Filters, Interceptors, AOP, OAuth2

This article presents five practical approaches to protect Spring Boot 3 API endpoints—including Filter, Interceptor, AOP combined with Filter, Spring Security, and OAuth2 integration—providing code examples, configuration steps, and screenshots to demonstrate authentication, authorization, and token handling for secure access control.

API securitySpring Bootauthentication
0 likes · 11 min read
Secure Spring Boot 3 APIs: 5 Methods with Filters, Interceptors, AOP, OAuth2
Java Captain
Java Captain
Jun 3, 2025 · Information Security

Integrating Spring Security with Spring Boot for JWT Authentication and Authorization

This article demonstrates how to integrate Spring Security into a Spring Boot application, configure JWT‑based authentication, implement custom AES encryption, define user and role entities, set up service and controller layers, and configure security, filter, and CORS settings to achieve secure login and permission management.

JWTSpring Bootauthentication
0 likes · 19 min read
Integrating Spring Security with Spring Boot for JWT Authentication and Authorization
Mike Chen's Internet Architecture
Mike Chen's Internet Architecture
May 29, 2025 · Information Security

How Single Sign-On (SSO) Works: Architecture and Flow Explained

This article explains the fundamentals of Single Sign-On (SSO), detailing its cross‑system authentication mechanism, core components such as CAS Server, CAS Client, and User Agent, and walks through the step‑by‑step flow that enables users to log in once and access multiple trusted applications seamlessly.

CASSSOSingle Sign-On
0 likes · 4 min read
How Single Sign-On (SSO) Works: Architecture and Flow Explained
MaGe Linux Operations
MaGe Linux Operations
May 15, 2025 · Cloud Native

Kubernetes Security Deep Dive: Auth, AuthZ, and Admission Control

This article explains Kubernetes' comprehensive security architecture, detailing the three critical gates—authentication, authorization, and admission control—along with token, basic, and certificate methods, RBAC policies, service accounts, kubeconfig setup, and practical examples for managing user permissions within clusters.

AdmissionControlDevOpsKubernetes
0 likes · 20 min read
Kubernetes Security Deep Dive: Auth, AuthZ, and Admission Control
Bilibili Tech
Bilibili Tech
May 9, 2025 · Artificial Intelligence

How an AI Gateway Scales LLM Services: Architecture, Auth, Quotas, and Load Balancing

This article explains the design of an AI gateway that centralizes LLM access, detailing its background, overall architecture, authentication, quota management, multi‑model routing, load‑balancing strategies, multi‑tenant isolation, observability features, and the supported API protocols for enterprise integration.

AI GatewayAPI GatewayLLM
0 likes · 17 min read
How an AI Gateway Scales LLM Services: Architecture, Auth, Quotas, and Load Balancing
Top Architect
Top Architect
May 7, 2025 · Information Security

Understanding JWT Token Security and Mitigation Strategies

This article explains the fundamentals of JSON Web Tokens (JWT), compares token‑based authentication with traditional session authentication, outlines common security threats such as theft, replay and forgery, and provides practical mitigation measures including HTTPS, token encryption, secure storage, expiration policies, two‑factor authentication and safe token refresh mechanisms.

JWTWeb Developmentauthentication
0 likes · 14 min read
Understanding JWT Token Security and Mitigation Strategies
Java Architect Essentials
Java Architect Essentials
May 6, 2025 · Backend Development

How @Authenticated Simplifies SpringBoot API Security

The article explains how the @Authenticated annotation in SpringBoot can replace repetitive manual authentication code, offering automatic request validation, role‑based checks, and streamlined error handling, with practical examples and a clear list of benefits for developers.

API securityAnnotationSpringBoot
0 likes · 7 min read
How @Authenticated Simplifies SpringBoot API Security
Code Mala Tang
Code Mala Tang
Apr 29, 2025 · Backend Development

Master FastAPI Middleware: From Built‑in to Custom Auth and Logging

This guide explains how FastAPI middleware works, outlines its request‑response lifecycle, shows built‑in examples like CORS and HTTPS redirect, and demonstrates how to create custom middleware for logging, authentication, and other cross‑cutting concerns.

authenticationbackendlogging
0 likes · 6 min read
Master FastAPI Middleware: From Built‑in to Custom Auth and Logging
Raymond Ops
Raymond Ops
Apr 24, 2025 · Cloud Native

Mastering Istio Security: Complete Guide to Mutual TLS, Authentication, and Authorization

This article explains how Istio secures micro‑service architectures by providing strong identity, fine‑grained access policies, transparent TLS encryption, and comprehensive AAA (authentication, authorization, audit) mechanisms, covering high‑level architecture, certificate management, peer and request authentication, and authorization policy design.

IstioMutual TLSauthentication
0 likes · 23 min read
Mastering Istio Security: Complete Guide to Mutual TLS, Authentication, and Authorization
Top Architect
Top Architect
Apr 21, 2025 · Information Security

Understanding JWT Token Security and Mitigation Strategies

This article explains the fundamentals of JSON Web Tokens (JWT), compares token‑based authentication with traditional session authentication, outlines common token security threats such as theft, replay, and forgery, and presents practical mitigation measures including HTTPS, encryption, secure storage, short expiration, MFA, and safe token refresh mechanisms.

HTTPSJWTauthentication
0 likes · 14 min read
Understanding JWT Token Security and Mitigation Strategies
Top Architect
Top Architect
Apr 17, 2025 · Information Security

Designing Secure Third‑Party API Authentication with AK/SK, Signatures and Replay‑Attack Prevention

This article presents a comprehensive design for securing third‑party APIs by using Access Key/Secret Key pairs, timestamp and nonce validation, signature generation, token handling, HTTPS, rate limiting, logging, idempotency, versioning, standardized response formats and practical Java code examples to prevent tampering and replay attacks.

API securityAccess KeySignature
0 likes · 32 min read
Designing Secure Third‑Party API Authentication with AK/SK, Signatures and Replay‑Attack Prevention
Alibaba Cloud Developer
Alibaba Cloud Developer
Apr 16, 2025 · Artificial Intelligence

Deploy AI Model Context Protocol (MCP) on Alibaba Cloud Serverless

An in‑depth guide explains the Model Context Protocol (MCP) as the AI era’s operating‑system interface, outlines ecosystem pain points, and shows how Alibaba Cloud Function Compute’s serverless platform provides optimal hosting, authentication, variable management, CI/CD, and fast‑mode options for deploying MCP services.

AICloud FunctionsMCP
0 likes · 10 min read
Deploy AI Model Context Protocol (MCP) on Alibaba Cloud Serverless
Subtle Storm
Subtle Storm
Apr 11, 2025 · Information Security

Practical JWT Authentication with PyJWT and Django SimpleJWT

This article explains the JWT standard, its three-part structure, and demonstrates how to generate, decode, refresh, and handle exceptions for tokens using PyJWT, then shows integration of SimpleJWT in a Django REST framework project, along with security best‑practice tips.

DjangoJWTPyJWT
0 likes · 7 min read
Practical JWT Authentication with PyJWT and Django SimpleJWT
Rare Earth Juejin Tech Community
Rare Earth Juejin Tech Community
Apr 10, 2025 · Backend Development

From Frontend Lightning Strike to Full‑Stack Node.js Backend: A Story and Implementation Guide

This article narrates a dramatic front‑end takeover during a high‑traffic promotion, then provides a step‑by‑step guide to building a Node.js backend service with Express, MongoDB, JWT authentication, and deployment considerations, illustrating performance trade‑offs between Java and Node.js.

API GatewayExpressFull-Stack
0 likes · 16 min read
From Frontend Lightning Strike to Full‑Stack Node.js Backend: A Story and Implementation Guide
Selected Java Interview Questions
Selected Java Interview Questions
Apr 8, 2025 · Backend Development

Authentication Implementation: Choosing Between JWT and Session in Backend Development

This article explains the technical selection between JWT and session for authentication, compares their differences, advantages, and disadvantages, and provides a complete Java implementation—including token generation, Redis storage, login/logout, password update, and request interception—demonstrating why JWT was chosen for a distributed backend system.

JWTRedisauthentication
0 likes · 13 min read
Authentication Implementation: Choosing Between JWT and Session in Backend Development
Architect
Architect
Apr 6, 2025 · Information Security

Technical Selection and Implementation of Authentication: JWT vs Session

This article compares JWT and session-based authentication, detailing their differences, certification processes, advantages, disadvantages, security considerations, performance impacts, token renewal, and revocation strategies, and provides a complete Java implementation using Spring, Redis, and custom utility classes.

JWTRedisauthentication
0 likes · 12 min read
Technical Selection and Implementation of Authentication: JWT vs Session
Architect's Guide
Architect's Guide
Mar 31, 2025 · Information Security

Design and Security Practices for Third‑Party API Authentication and Signing

This article presents a comprehensive design scheme for third‑party APIs, covering permission segmentation, AK/SK generation, signature workflow and rules, secure API endpoint design, anti‑replay mechanisms, token handling, TLS encryption, database schema, and implementation examples in Java.

API securityAccess KeySignature
0 likes · 30 min read
Design and Security Practices for Third‑Party API Authentication and Signing
Top Architecture Tech Stack
Top Architecture Tech Stack
Mar 25, 2025 · Information Security

Designing Secure Third‑Party API Interfaces: Authentication, Signature, and Best Practices

This guide details a secure third‑party API design, covering API key generation, request signing with timestamps and nonces, permission division, CRUD endpoint definitions, unified response structures, and best‑practice security measures such as HTTPS, IP whitelisting, rate limiting, logging, and idempotency handling.

API securitySignatureauthentication
0 likes · 29 min read
Designing Secure Third‑Party API Interfaces: Authentication, Signature, and Best Practices
Liangxu Linux
Liangxu Linux
Mar 19, 2025 · Operations

Master FTP: Configure, Secure, and Manage Linux File Transfers

This guide explains the FTP protocol, active and passive modes, authentication options, and step‑by‑step Linux vsftpd configuration—including local, anonymous, and virtual user setups, permission tweaks, chroot jail rules, and file download/upload commands.

FTPLinuxServer configuration
0 likes · 10 min read
Master FTP: Configure, Secure, and Manage Linux File Transfers
Top Architect
Top Architect
Mar 17, 2025 · Information Security

OAuth 2.0 Overview and Spring Boot Implementation Guide

This article introduces OAuth 2.0 fundamentals, explains its roles and four grant types, and provides a step‑by‑step Spring Boot implementation with configuration classes, code snippets, and testing procedures, while also containing promotional material for AI‑related products and services.

APIOAuth2Spring Boot
0 likes · 12 min read
OAuth 2.0 Overview and Spring Boot Implementation Guide
php Courses
php Courses
Feb 21, 2025 · Backend Development

Best Practices for Laravel API Development in 2025

This guide presents comprehensive Laravel API development best practices for 2025, covering authentication with Sanctum and Passport, resource formatting, versioning, rate limiting, error handling, caching, and logging, offering code examples and practical advice to build secure, scalable, high‑performance APIs.

APIPHPVersioning
0 likes · 6 min read
Best Practices for Laravel API Development in 2025
Java Architecture Diary
Java Architecture Diary
Feb 19, 2025 · Information Security

How Spring Security 6.4’s One-Time Token Login Enhances Security and UX

Spring Security 6.4 introduces One-Time Token Login, allowing users to authenticate via a magic link sent by email instead of passwords; the article explains its core concepts, token lifecycle, essential components, and provides step‑by‑step code examples for configuring and implementing this secure, user‑friendly authentication method.

Magic Linkauthenticationjava
0 likes · 5 min read
How Spring Security 6.4’s One-Time Token Login Enhances Security and UX
Java Tech Enthusiast
Java Tech Enthusiast
Feb 12, 2025 · Backend Development

How to Implement Single Device Login in Web Applications

The article explains how to enforce single‑device login in web apps by contrasting token‑version control—incrementing a version field in the database and embedding it in JWTs to invalidate older tokens—with a WebSocket‑based method that pushes real‑time logout messages, comparing their trade‑offs and suggesting a hybrid solution.

authenticationbackend developmentforced logout
0 likes · 5 min read
How to Implement Single Device Login in Web Applications
Code Ape Tech Column
Code Ape Tech Column
Feb 4, 2025 · Backend Development

Sa-Token Java Permission Authentication Framework: Overview, Login, and Permission Implementation

This article introduces the lightweight Sa-Token Java authentication framework, explains why it is chosen over Spring Security and Shiro, details its login and permission APIs with code examples, shows how to configure it in Spring Boot and WebFlux projects, and lists its extensive feature set for secure backend development.

Sa-TokenSpring Bootauthentication
0 likes · 23 min read
Sa-Token Java Permission Authentication Framework: Overview, Login, and Permission Implementation
Top Architect
Top Architect
Jan 30, 2025 · Backend Development

OAuth 2.0 Tutorial with Spring Boot Implementation and Testing

This article introduces OAuth 2.0 concepts, explains its roles and grant types, and provides a complete Spring Boot implementation—including configuration classes, dependency setup, and test endpoints—followed by step‑by‑step testing results with screenshots.

OAuth2authenticationbackend
0 likes · 13 min read
OAuth 2.0 Tutorial with Spring Boot Implementation and Testing
Top Architect
Top Architect
Jan 22, 2025 · Information Security

Designing Secure Third‑Party API Authentication with AK/SK, Signatures and Token Management

This article presents a comprehensive design for securing third‑party API calls by generating unique Access Key/Secret Key pairs, defining permission granularity, implementing signature generation with timestamps and nonces, handling token lifecycle, and providing concrete Java and SQL code examples for practical deployment.

AK/SKAPI securitySignature
0 likes · 31 min read
Designing Secure Third‑Party API Authentication with AK/SK, Signatures and Token Management
Code Ape Tech Column
Code Ape Tech Column
Jan 20, 2025 · Backend Development

Integrating Spring Cloud Gateway with OAuth2.0 for Unified Authentication and Authorization

This article demonstrates how to integrate Spring Cloud Gateway with OAuth2.0 to build a unified authentication and authorization solution for microservices, covering architecture design, service setup, JWT token handling, custom authentication and authorization managers, exception handling, and end‑to‑end testing.

OAuth2.0authentication
0 likes · 10 min read
Integrating Spring Cloud Gateway with OAuth2.0 for Unified Authentication and Authorization
dbaplus Community
dbaplus Community
Dec 29, 2024 · Information Security

Why Many Developers Warn Against Using JWTs for Authentication

This article explains what JSON Web Tokens are, outlines their typical usage flow, and critically examines their drawbacks such as size overhead, redundant signatures, revocation challenges, stale data, lack of encryption, and broader security concerns.

JWTToken Revocationauthentication
0 likes · 6 min read
Why Many Developers Warn Against Using JWTs for Authentication
21CTO
21CTO
Dec 16, 2024 · Information Security

Pick the Best Identity Verification Framework: Clerk, Supabase Auth, or Better Auth

This article introduces three top‑tier authentication solutions—Clerk, Supabase Auth, and Better Auth—detailing their key features, supported strategies, customization options, and integration benefits, helping developers decide which framework best fits their user management and security needs.

Identity verificationUser Managementauthentication
0 likes · 4 min read
Pick the Best Identity Verification Framework: Clerk, Supabase Auth, or Better Auth
Eric Tech Circle
Eric Tech Circle
Dec 16, 2024 · Backend Development

Implementing Secure Double‑Token Authentication in WeChat Mini‑Programs

This article explains the design and implementation of a dual‑token authentication system—short‑lived AccessToken and long‑lived RefreshToken—for WeChat Mini‑Programs, covering token generation, login flow, client‑side handling of 401/403 errors, and best‑practice testing strategies.

API securityAccessTokenJWT
0 likes · 6 min read
Implementing Secure Double‑Token Authentication in WeChat Mini‑Programs
Code Mala Tang
Code Mala Tang
Dec 16, 2024 · Information Security

Avoid These 9 Common Node.js Security Pitfalls and Harden Your Apps

This guide reveals nine frequent security mistakes in Node.js applications—from misconfigured CORS and vulnerable dependencies to weak authentication and missing HTTPS—offering concrete code‑level solutions and best‑practice recommendations to protect your backend.

CORSDependency ManagementInput Validation
0 likes · 8 min read
Avoid These 9 Common Node.js Security Pitfalls and Harden Your Apps
Architect's Guide
Architect's Guide
Dec 16, 2024 · Information Security

Understanding the Mechanics of QR Code Login and Token‑Based Authentication

This article explains how QR code login works by describing QR code fundamentals, token‑based authentication, and the step‑by‑step process—including QR generation, scanning, state transitions, and final confirmation—that enables a mobile device to securely authenticate a PC session.

LoginQR codeauthentication
0 likes · 11 min read
Understanding the Mechanics of QR Code Login and Token‑Based Authentication
Top Architect
Top Architect
Dec 6, 2024 · Information Security

Design and Implementation of Secure Third‑Party API Authentication Using AK/SK, Signatures, and Tokens

This article presents a comprehensive design for securing third‑party APIs, covering permission segmentation, AK/SK generation, signature workflow and rules, anti‑replay mechanisms, token handling, detailed API endpoint specifications, and best‑practice security measures with illustrative Java code examples.

AK/SKAPI securitySignature
0 likes · 32 min read
Design and Implementation of Secure Third‑Party API Authentication Using AK/SK, Signatures, and Tokens
Code Ape Tech Column
Code Ape Tech Column
Nov 30, 2024 · Cloud Native

Implementing Distributed Authentication in Spring Cloud Alibaba Using Custom Annotations

This article demonstrates how to move authentication from the gateway to downstream microservices in a Spring Cloud Alibaba setup by disabling the gateway’s ReactiveAuthorizationManager, defining three custom security annotations, creating an AOP aspect to enforce them, and showing practical usage examples with role‑based access control and Feign calls.

AOPSpring Cloudannotations
0 likes · 9 min read
Implementing Distributed Authentication in Spring Cloud Alibaba Using Custom Annotations
Programmer1970
Programmer1970
Nov 24, 2024 · Backend Development

Designing Secure, Efficient, and Maintainable Third‑Party API Calls

The article outlines a comprehensive approach to third‑party API design, covering core principles such as security, reliability, usability and extensibility, detailed key‑management and authentication mechanisms, RESTful API specifications, implementation steps with code samples, and best‑practice recommendations for robust and maintainable integrations.

API designRESTfulSignature
0 likes · 16 min read
Designing Secure, Efficient, and Maintainable Third‑Party API Calls
Mike Chen's Internet Architecture
Mike Chen's Internet Architecture
Nov 21, 2024 · Information Security

Mastering Single Sign-On (SSO): Principles, Tokens, and Real-World Applications

This article provides a comprehensive overview of Single Sign-On (SSO), explaining its core concepts, authentication flow, token generation and validation, and practical use cases across enterprises, education, finance, and e‑commerce, while also offering insights into security benefits and implementation details.

SSOauthenticationsecurity
0 likes · 5 min read
Mastering Single Sign-On (SSO): Principles, Tokens, and Real-World Applications
php Courses
php Courses
Nov 14, 2024 · Information Security

Best Practices for Securing Laravel Web Applications

This article outlines essential Laravel security practices, including built‑in authentication, CSRF protection, input validation, HTTPS enforcement, secure session handling, regular dependency updates, and rate limiting, providing developers with concrete steps to protect web applications from common attacks.

CSRFHTTPSauthentication
0 likes · 6 min read
Best Practices for Securing Laravel Web Applications
37 Interactive Technology Team
37 Interactive Technology Team
Nov 11, 2024 · Information Security

Background, Definition, Structure, and Authentication Process of JWT (JSON Web Token)

JSON Web Token (JWT) is a compact, self‑contained, stateless token that encodes header, payload, and signature in Base64URL, enabling secure, signature‑verified authentication without server‑side session storage, simplifying scaling, supporting cross‑domain use, while offering advantages like lightweight extensibility and drawbacks such as revocation difficulty and secret‑key reliance.

JWTauthenticationauthorization
0 likes · 16 min read
Background, Definition, Structure, and Authentication Process of JWT (JSON Web Token)
Java Architecture Stack
Java Architecture Stack
Nov 6, 2024 · Information Security

Mastering Apache Shiro: Core Concepts, Real‑World Usage, and JWT Microservice Integration

This article explains Apache Shiro’s fundamental components—Subject, SecurityManager, Realm, Session, authentication, authorization, and cryptography—then walks through a complete configuration example, a custom Realm, JWT integration, and a Spring Boot microservice scenario to illustrate secure, stateless authentication and fine‑grained permission control.

Apache ShiroJWTJava Security
0 likes · 13 min read
Mastering Apache Shiro: Core Concepts, Real‑World Usage, and JWT Microservice Integration
IT Services Circle
IT Services Circle
Oct 27, 2024 · Information Security

Understanding Password Salting: Why It Matters, How to Generate and Use It, and Additional Security Measures

This article explains what password salting is, why it is essential for protecting stored passwords against rainbow‑table and brute‑force attacks, outlines step‑by‑step how to generate, apply, and verify salted hashes, and lists additional best practices for enhancing overall credential security.

Hashingauthenticationpassword
0 likes · 5 min read
Understanding Password Salting: Why It Matters, How to Generate and Use It, and Additional Security Measures
Ubiquitous Tech
Ubiquitous Tech
Oct 20, 2024 · Information Security

Understanding Third-Party Login Basics with the JustAuth Component

This article explains the concepts, differences, and implementation steps of third‑party login and SSO, introduces the open‑source JustAuth library, and provides practical guidance and examples for integrating OAuth‑based authentication into web or mobile applications.

JustAuthOAuthOpenID Connect
0 likes · 16 min read
Understanding Third-Party Login Basics with the JustAuth Component
MaGe Linux Operations
MaGe Linux Operations
Oct 16, 2024 · Information Security

How to Build a Unified Enterprise SSO System with Go and Vue

This guide explains the challenges of multiple logins in enterprises, introduces Single Sign‑On concepts and protocols, and provides a step‑by‑step deployment of an open‑source Go‑Vue SSO solution, covering authentication methods, supported protocols, security features, and Docker‑based installation.

DockerGoSSO
0 likes · 8 min read
How to Build a Unified Enterprise SSO System with Go and Vue