BestHub
Sign in
Tagged articles

Authentication

721 articles · Page 4 of 8
Selected Java Interview Questions
Selected Java Interview Questions
Jan 20, 2024 · Backend Development

Implementing Sa-Token Authentication in Spring Cloud Gateway with Redis and Nacos

This article demonstrates how to replace heavyweight Spring Security with the lightweight Sa-Token framework by configuring token generation, session storage in Redis, service discovery via Nacos, and permission checks in a Spring Cloud Gateway micro‑service architecture, complete with code examples and deployment settings.

AuthenticationJavaNacos
0 likes · 21 min read
Implementing Sa-Token Authentication in Spring Cloud Gateway with Redis and Nacos
Architecture Development Notes
Architecture Development Notes
Jan 4, 2024 · Information Security

How to Implement Seamless, Secure Token Refresh for Modern Apps

This article explains the concept, workflow, and step‑by‑step implementation of a seamless token refresh mechanism, providing code examples and security best practices to keep user sessions alive without interruption while maintaining strong protection against token theft and replay attacks.

AuthenticationBackendSecurity
0 likes · 7 min read
How to Implement Seamless, Secure Token Refresh for Modern Apps
Spring Full-Stack Practical Cases
Spring Full-Stack Practical Cases
Jan 2, 2024 · Information Security

Master Spring Security: Custom Configurations, Filters, and Advanced Features

An in‑depth Spring Security guide covering custom configurations, authentication providers, user‑details services, path‑based authorization, role hierarchies, exception handling, custom filters, multiple filter chains, method security, internationalization, and session management, complete with practical code examples for Spring Boot 2.7.

AuthenticationAuthorizationJava
0 likes · 10 min read
Master Spring Security: Custom Configurations, Filters, and Advanced Features
macrozheng
macrozheng
Dec 30, 2023 · Backend Development

Master Single Sign-On (SSO) with SpringBoot, Vue & Uni‑App: A Hands‑On Guide

This article explains the concept, advantages, and implementation methods of Single Sign‑On (SSO) and provides two complete hands‑on examples—including architecture diagrams, database schema, configuration, and Java code for token‑based, ticket‑based, and RSA/AES encrypted SSO flows—using SpringBoot, Vue and Uni‑App.

AuthenticationJavaSSO
0 likes · 18 min read
Master Single Sign-On (SSO) with SpringBoot, Vue & Uni‑App: A Hands‑On Guide
php Courses
php Courses
Dec 25, 2023 · Backend Development

Top 10 Laravel Packages to Know in 2024

This article introduces the ten most noteworthy Laravel packages for 2024, covering authentication, markdown rendering, real‑time UI, image processing, debugging, search, Excel import/export, queue handling, localization, and automatic API generation, each with concise explanations and code examples.

APIAuthenticationLaravel
0 likes · 8 min read
Top 10 Laravel Packages to Know in 2024
php Courses
php Courses
Dec 23, 2023 · Backend Development

Implementing User Impersonation in Laravel with the Lab404 Impersonate Package

This guide explains how to add user impersonation to a Laravel application using the Lab404 Impersonate package, covering installation, service provider registration, session handling, helper functions, routing, and API methods for starting and ending impersonation sessions.

AuthenticationImpersonationLaravel
0 likes · 6 min read
Implementing User Impersonation in Laravel with the Lab404 Impersonate Package
Code Ape Tech Column
Code Ape Tech Column
Dec 19, 2023 · Information Security

Implementation of Single Sign-On (SSO) with Service A and Service B Using Ticket and Token Mechanisms

This article explains the concept, advantages, and three implementation methods of Single Sign-On (SSO), then provides two complete practical examples—including architecture diagrams, step‑by‑step flows, and full Java code for ticket‑based and encrypted data‑based SSO—followed by supplementary RSA key generation notes and a brief promotional note.

AuthenticationBackendJava
0 likes · 18 min read
Implementation of Single Sign-On (SSO) with Service A and Service B Using Ticket and Token Mechanisms
Liangxu Linux
Liangxu Linux
Nov 26, 2023 · Information Security

Understanding SSH: Ports, Authentication, and Encryption Explained

SSH (Secure Shell) is a widely used network security protocol that replaces insecure methods like Telnet and FTP by encrypting data and authenticating users, typically operating on port 22, and employing both symmetric and asymmetric encryption, key exchange, and various authentication methods such as passwords and public‑key pairs.

AuthenticationOpenSSHPutty
0 likes · 10 min read
Understanding SSH: Ports, Authentication, and Encryption Explained
Java High-Performance Architecture
Java High-Performance Architecture
Nov 21, 2023 · Information Security

Master Spring Security: Quick Start, JWT Authentication, and RBAC Authorization

This comprehensive guide walks you through setting up Spring Security in a Spring Boot project, configuring password encoding, implementing JWT-based authentication, building custom login and logout endpoints, managing user details with MyBatis Plus, and applying role‑based access control with custom permission handlers, all illustrated with complete code examples.

AuthenticationAuthorizationJWT
0 likes · 40 min read
Master Spring Security: Quick Start, JWT Authentication, and RBAC Authorization
Java Architect Essentials
Java Architect Essentials
Nov 19, 2023 · Backend Development

Designing a Multi‑Account Unified Login System: From Phone Number Authentication to Third‑Party Integration

This article explains how to design a scalable multi‑account login system, covering self‑built phone‑number authentication, optimized password‑less flows, third‑party integrations such as Weibo and WeChat, a refactored user‑basic and authorization schema, and the steps for implementing one‑click carrier‑based login.

AuthenticationMulti-Accountdatabase design
0 likes · 14 min read
Designing a Multi‑Account Unified Login System: From Phone Number Authentication to Third‑Party Integration
Open Source Linux
Open Source Linux
Nov 10, 2023 · Information Security

Understanding SSH: Ports, Workflow, and Key Authentication Explained

This article explains the SSH protocol, covering its default port, the step‑by‑step process of establishing a secure connection, the role of symmetric and asymmetric encryption, and how password and public‑key authentication work with tools like PuTTY and OpenSSH.

AuthenticationKey ManagementOpenSSH
0 likes · 8 min read
Understanding SSH: Ports, Workflow, and Key Authentication Explained
Architecture Digest
Architecture Digest
Nov 2, 2023 · Backend Development

Designing a Scalable Multi‑Account Login System: From Phone Number Registration to One‑Click Login

This article outlines the design of a flexible multi‑account authentication system, covering self‑built phone‑number registration, optimized password‑less login, integration of third‑party providers such as Weibo and WeChat, a split user/base‑authorization database schema, and a carrier‑based one‑click login flow.

Authenticationaccount designlogin
0 likes · 10 min read
Designing a Scalable Multi‑Account Login System: From Phone Number Registration to One‑Click Login
Code Ape Tech Column
Code Ape Tech Column
Oct 27, 2023 · Information Security

Why JWT Is Unsuitable for Session Management and Its Security Risks

This article explains why using JSON Web Tokens for session management is unsafe, detailing misconceptions about their benefits, highlighting security, scalability, and usability drawbacks, and finally outlining appropriate use cases such as short‑lived one‑time authorization tokens.

AuthenticationJWTSession Management
0 likes · 15 min read
Why JWT Is Unsuitable for Session Management and Its Security Risks
Open Source Tech Hub
Open Source Tech Hub
Oct 16, 2023 · Information Security

Mastering JWT Authentication in PHP: From Basics to Advanced Usage

This guide explains the limitations of traditional session authentication, introduces JSON Web Token (JWT) as a scalable cross‑domain solution, and provides step‑by‑step instructions for installing, configuring, generating, and validating JWTs in PHP applications, including supported algorithms and practical code examples.

APIAuthenticationJWT
0 likes · 9 min read
Mastering JWT Authentication in PHP: From Basics to Advanced Usage
Liangxu Linux
Liangxu Linux
Oct 15, 2023 · Information Security

Understanding SSH: Ports, Workflow, and Key Authentication Explained

SSH (Secure Shell) is a widely used network security protocol that replaces insecure methods like Telnet and FTP, operating over default port 22, supporting key exchange, encryption algorithms, multiple authentication methods, and session management, with tools such as PuTTY and OpenSSH for client connections.

AuthenticationOpenSSHPutty
0 likes · 10 min read
Understanding SSH: Ports, Workflow, and Key Authentication Explained
php Courses
php Courses
Sep 29, 2023 · Backend Development

Using PHP Sessions and Cookies to Enhance Web Applications

This article explains how PHP sessions and cookies work together to manage user data, improve authentication, shopping carts, and personalization, providing code examples and best practices for secure, seamless web application development.

AuthenticationPHPSessions
0 likes · 7 min read
Using PHP Sessions and Cookies to Enhance Web Applications
MaGe Linux Operations
MaGe Linux Operations
Sep 28, 2023 · Information Security

Mastering JWT: Standard Claims, Custom Tokens, and Renewal Strategies

This article explains JWT payload claims, lists standard and custom claims, shows how to generate a token with expiration in Java, and compares single‑token and double‑token renewal strategies—including OAuth 2.0 approaches and Redis‑based storage—to manage token expiration securely.

AuthenticationJWTJava
0 likes · 5 min read
Mastering JWT: Standard Claims, Custom Tokens, and Renewal Strategies
Top Architect
Top Architect
Sep 13, 2023 · Backend Development

Token Storage and Validation in Distributed Microservices Using Redis and Custom Annotations

This article explains how to generate, store, and validate login tokens across PC and mobile clients in a distributed microservice architecture, covering Redis storage, custom token entities, Spring service implementation, exception handling, client‑side storage utilities, and a custom annotation with an AOP aspect for request verification.

AuthenticationSpringaspect-oriented
0 likes · 17 min read
Token Storage and Validation in Distributed Microservices Using Redis and Custom Annotations
Top Architecture Tech Stack
Top Architecture Tech Stack
Aug 31, 2023 · Information Security

Design of QR Code Login Functionality

This article explains the three-stage design of a QR code login system—including pending scan, scanned‑pending‑confirmation, and confirmed phases—detailing how unique QR IDs, token exchange, and user confirmation ensure secure authentication across PC and mobile devices.

AuthenticationBackendDesign
0 likes · 5 min read
Design of QR Code Login Functionality
Java Interview Crash Guide
Java Interview Crash Guide
Aug 29, 2023 · Backend Development

Designing a Scalable Multi‑Account Login System: Phone Verification to One‑Click Auth

This article outlines practical strategies for building a flexible multi‑account login architecture, covering traditional phone‑number/password registration, optimized password‑less flows, integration of third‑party providers such as Weibo, WeChat and QQ, a unified user‑base and authorization schema, and the implementation of carrier‑based one‑click authentication.

AuthenticationMulti-Accountdatabase design
0 likes · 14 min read
Designing a Scalable Multi‑Account Login System: Phone Verification to One‑Click Auth
JavaEdge
JavaEdge
Aug 20, 2023 · Information Security

Cookie vs Authorization Header: Which Token Storage Method Is Safer?

This article compares storing authentication tokens in cookies versus the Authorization header, outlining each method's implementation, advantages, drawbacks, security implications such as XSS and CSRF risks, cross‑domain considerations, and compliance with authentication standards.

AuthenticationAuthorization HeaderToken Storage
0 likes · 5 min read
Cookie vs Authorization Header: Which Token Storage Method Is Safer?
Su San Talks Tech
Su San Talks Tech
Aug 15, 2023 · Information Security

Master Spring Security & JWT: Build Secure Authentication in Spring Boot

This tutorial explains how to integrate Spring Security with JWT in a Spring Boot application, covering authentication and authorization concepts, filter chain principles, project setup, dependency configuration, security configuration classes, custom token filters, and the complete request‑authentication flow.

AuthenticationAuthorizationJWT
0 likes · 15 min read
Master Spring Security & JWT: Build Secure Authentication in Spring Boot
Didi Tech
Didi Tech
Aug 10, 2023 · Information Security

Security Hardening and Architecture of Didi's Elasticsearch Deployment

Didi hardened its massive Elasticsearch deployment—spanning 66 clusters and thousands of nodes—by adding a custom security plugin that authenticates requests at the cluster level, implementing a one‑click toggle and staged rolling upgrades, ultimately enabling authentication across all clusters and dramatically reducing data‑leak risk.

AuthenticationDidiElasticsearch
0 likes · 12 min read
Security Hardening and Architecture of Didi's Elasticsearch Deployment
Architect's Guide
Architect's Guide
Jul 28, 2023 · Information Security

OAuth 2.0 Overview, Authorization Modes, and Implementation for GitHub, QQ, and WeChat Login

This article provides a comprehensive introduction to OAuth 2.0, its core concepts, advantages and disadvantages, details four authorization flows, and presents step‑by‑step Java Spring Boot implementations for GitHub, QQ, and WeChat third‑party login, including database design considerations and code examples.

AuthenticationGitHubJava
0 likes · 21 min read
OAuth 2.0 Overview, Authorization Modes, and Implementation for GitHub, QQ, and WeChat Login
Java Architect Essentials
Java Architect Essentials
Jul 18, 2023 · Backend Development

Build QR‑Code Login with WebSocket in Spring Boot

This guide walks through designing a User_Token table, defining roles and APIs, implementing QR‑code generation and validation endpoints, and wiring a Spring Boot WebSocket server with front‑end AJAX to achieve secure, real‑time QR‑code login for Android, web and PC clients.

AuthenticationJavaQR Code Login
0 likes · 14 min read
Build QR‑Code Login with WebSocket in Spring Boot
Architect's Guide
Architect's Guide
Jul 17, 2023 · Information Security

Implementing API Key Authentication in Spring Security for REST APIs

This tutorial explains how to secure a Spring Boot REST API using API‑key authentication by adding the necessary Maven dependency, creating a custom filter, extending AbstractAuthenticationToken, configuring Spring Security, implementing a controller, and testing the endpoint with and without the API key.

API keyAuthenticationJava
0 likes · 9 min read
Implementing API Key Authentication in Spring Security for REST APIs
MaGe Linux Operations
MaGe Linux Operations
Jul 15, 2023 · Information Security

Top API Vulnerabilities Every Tester Should Know

This article surveys the most common API security flaws—including information disclosure, broken object‑level and function‑level authorization, over‑exposure of data, missing rate limits, mass‑assignment, misconfigurations, injection attacks, improper asset management, and business‑logic bugs—providing examples, code snippets, and practical testing tips for security professionals.

API SecurityAuthenticationBOLA
0 likes · 17 min read
Top API Vulnerabilities Every Tester Should Know
Selected Java Interview Questions
Selected Java Interview Questions
Jul 10, 2023 · Backend Development

Designing a Unified Multi‑Account Login System with Phone, Password, and Third‑Party Authentication

This article outlines a comprehensive approach to building a scalable multi‑account login system that supports phone‑number/password, phone‑number/verification‑code, and various third‑party OAuth providers, detailing workflow steps, database schema, advantages, drawbacks, and a one‑click login integration.

AuthenticationBackendThird-Party Login
0 likes · 15 min read
Designing a Unified Multi‑Account Login System with Phone, Password, and Third‑Party Authentication
Selected Java Interview Questions
Selected Java Interview Questions
Jun 16, 2023 · Backend Development

Spring Security Overview: Core Features, Principles, Access Control Methods, Role vs Authority, Password Encryption, and Username/Password Authentication Flow

This article explains Spring Security's core functions, underlying filter‑based mechanism, various request‑access control methods, the distinction between hasRole and hasAuthority, how to encrypt passwords with BCryptPasswordEncoder, and the complete username‑password authentication process for securing backend applications.

AuthenticationAuthorizationBackend Security
0 likes · 10 min read
Spring Security Overview: Core Features, Principles, Access Control Methods, Role vs Authority, Password Encryption, and Username/Password Authentication Flow
Laravel Tech Community
Laravel Tech Community
Jun 13, 2023 · Information Security

Understanding Tokens, JWT, and Authentication Security

This article explains the principles, structure, and workflow of token‑based authentication—including access and refresh tokens, JWT, CSRF attacks, same‑origin policy, cross‑origin solutions, and common encryption algorithms—highlighting their advantages, limitations, and practical usage in modern web and mobile applications.

AuthenticationJWTSecurity
0 likes · 18 min read
Understanding Tokens, JWT, and Authentication Security
Programmer DD
Programmer DD
Jun 4, 2023 · Information Security

How to Secure Your ChatGPT‑Web Deployment from Free API Exploits

This article explains how the default title of the open‑source ChatGPT‑web project makes deployments vulnerable to discovery by asset‑search engines like FOFA and Shodan, leading to unauthorized API usage, and provides practical steps—changing the title and adding authentication—to protect the site and prevent unexpected costs.

AuthenticationChatGPT-webFOFA
0 likes · 6 min read
How to Secure Your ChatGPT‑Web Deployment from Free API Exploits
Java Architect Essentials
Java Architect Essentials
May 28, 2023 · Artificial Intelligence

Face-UI: Web-Based Facial Login System Using Spring Boot and Vue

This article introduces FACE-UI, a front‑back separated web application that implements facial login by capturing a photo via the browser, sending it to a Spring Boot backend, and using Tencent Cloud's face comparison API for authentication, with full setup instructions and code examples.

AuthenticationSpring BootTencent Cloud
0 likes · 4 min read
Face-UI: Web-Based Facial Login System Using Spring Boot and Vue
php Courses
php Courses
May 28, 2023 · Backend Development

Implementing Single Sign-On (SSO) with PHP: A Step-by-Step Guide

This tutorial explains how to build a PHP-based single sign‑on system using a main login application, a shared authentication service backed by MySQL and Redis, and multiple external applications, providing complete code examples for database setup, login handling, session sharing, and logout.

AuthenticationMySQLPHP
0 likes · 8 min read
Implementing Single Sign-On (SSO) with PHP: A Step-by-Step Guide
Architects Research Society
Architects Research Society
May 24, 2023 · Information Security

Best Practices for Secure Remote Access to Industrial Control Systems (ICS)

This article explains why remote access to industrial control systems is essential, outlines the risks demonstrated by high‑profile attacks, and provides detailed best‑practice guidance—including DMZ architecture, authentication, jump hosts, file transfer, and policies for direct connections—to securely manage OT environments.

AuthenticationBest PracticesDMZ
0 likes · 18 min read
Best Practices for Secure Remote Access to Industrial Control Systems (ICS)
Code Ape Tech Column
Code Ape Tech Column
May 24, 2023 · Backend Development

Sa-Token: A Lightweight Java Authentication and Authorization Framework

This article introduces Sa-Token, a lightweight Java permission authentication framework, explains why it was chosen over Spring Security and Shiro, details its core login and permission APIs, demonstrates integration with Spring Boot and WebFlux, and lists its extensive feature set for modern backend development.

AuthenticationAuthorizationBackend
0 likes · 21 min read
Sa-Token: A Lightweight Java Authentication and Authorization Framework
Sanyou's Java Diary
Sanyou's Java Diary
May 15, 2023 · Information Security

Master OAuth2: From Theory to Hands‑On Implementation with Spring Security

This article explains OAuth2 fundamentals, key terminology, and authorization flows, then guides you through setting up database tables, Spring Boot dependencies, resource and authorization server configurations, multiple grant types, token refresh, permission checks, and common pitfalls, providing complete code snippets and diagrams for a practical implementation.

AuthenticationAuthorization Code FlowOAuth2
0 likes · 17 min read
Master OAuth2: From Theory to Hands‑On Implementation with Spring Security
Java Architect Essentials
Java Architect Essentials
May 13, 2023 · Information Security

Sa-Token Java Authentication and Authorization Framework: Overview, Core Concepts, and SpringBoot Integration

This article introduces the lightweight Sa-Token Java framework, explains its login and permission authentication mechanisms, demonstrates essential API usage with code examples, and provides step‑by‑step integration guides for SpringBoot and WebFlux, covering configuration, session handling, role checks, wildcard permissions, and global exception handling.

AuthenticationAuthorizationPermission
0 likes · 23 min read
Sa-Token Java Authentication and Authorization Framework: Overview, Core Concepts, and SpringBoot Integration
Architect
Architect
Apr 30, 2023 · Information Security

Common API Vulnerabilities and How to Detect Them

This article explains the most frequent API security weaknesses—including information disclosure, broken object‑level and function‑level authorization, authentication bypass, over‑exposure of data, missing rate limits, mass‑assignment, misconfiguration, injection, asset mismanagement, and business‑logic flaws—providing detection techniques and illustrative code examples.

AuthenticationRate LimitingVulnerabilities
0 likes · 17 min read
Common API Vulnerabilities and How to Detect Them
MaGe Linux Operations
MaGe Linux Operations
Apr 25, 2023 · Backend Development

Choosing JWT vs Session: A Practical Guide to Secure Backend Authentication

This article compares JWT and session authentication, explains their differences, security and performance trade‑offs, and provides a complete Java implementation with Redis integration, guiding developers on selecting and implementing the most suitable authentication method for distributed backend systems.

AuthenticationJWTRedis
0 likes · 14 min read
Choosing JWT vs Session: A Practical Guide to Secure Backend Authentication
Architect's Guide
Architect's Guide
Apr 20, 2023 · Information Security

OAuth 2.0: Principles, Architecture, and Implementation Overview

This article explains the fundamental concepts, roles, and step‑by‑step flow of OAuth 2.0, compares it with single sign‑on, describes the architecture of authorization, resource, and client servers, and clarifies related terminology such as authentication, federation, and delegated access.

APIAuthenticationOAuth2.0
0 likes · 11 min read
OAuth 2.0: Principles, Architecture, and Implementation Overview
Java High-Performance Architecture
Java High-Performance Architecture
Apr 5, 2023 · Backend Development

Master Spring Security: JWT, Custom Handlers, and Dynamic Permissions

This article provides a comprehensive guide to configuring Spring Security in a Java backend, covering Maven dependencies, global security settings, JWT token parsing, custom authentication providers, user details services, dynamic URL permission metadata, access decision management, and custom handlers for login, logout, and error responses, along with sample application.yml and database schema.

AuthenticationAuthorizationJWT
0 likes · 20 min read
Master Spring Security: JWT, Custom Handlers, and Dynamic Permissions
Top Architect
Top Architect
Mar 29, 2023 · Information Security

Understanding OAuth2.0: Principles, Architecture, and Implementation

This article explains the fundamentals of OAuth2.0, distinguishes it from SSO, describes the roles of resource owner, client, authorization server and resource server, outlines the step‑by‑step authorization flow, and clarifies related terminology such as authentication, federated identity, and delegated authorization.

AuthenticationAuthorizationOAuth2.0
0 likes · 13 min read
Understanding OAuth2.0: Principles, Architecture, and Implementation
TAL Education Technology
TAL Education Technology
Mar 23, 2023 · Frontend Development

The Principles Behind Front-End QR Code Login

This article explains the underlying mechanism of front‑end QR‑code login, detailing the roles of the PC page, mobile device, and server, and walks through the step‑by‑step process from generating the QR code to confirming login and issuing a token.

AuthenticationQR Code Loginclient‑server
0 likes · 3 min read
The Principles Behind Front-End QR Code Login
政采云技术
政采云技术
Mar 21, 2023 · Information Security

Deep Dive into Spring Security Authentication Process and Core Components

This article provides a comprehensive analysis of Spring Security's authentication mechanism, detailing the filter chain, core components such as SecurityContextHolder, AuthenticationManager, ProviderManager, and AuthenticationProvider, and illustrating the step‑by‑step flow of username‑password verification with extensive code examples.

AuthenticationAuthenticationManagerJava
0 likes · 18 min read
Deep Dive into Spring Security Authentication Process and Core Components
政采云技术
政采云技术
Mar 21, 2023 · Information Security

In‑Depth Analysis of Spring Security Authentication Process and Core Components

This article provides a comprehensive walkthrough of Spring Security’s authentication mechanism, detailing the filter chain, core security components, and the underlying source‑code flow—from UsernamePasswordAuthenticationFilter through AuthenticationManager, ProviderManager, and DaoAuthenticationProvider—illustrated with code examples and diagrams.

AuthenticationAuthorizationBackend
0 likes · 20 min read
In‑Depth Analysis of Spring Security Authentication Process and Core Components
Top Architect
Top Architect
Mar 13, 2023 · Information Security

Understanding Single Sign‑On (SSO) and CAS Authentication Flows

This article explains the concept, background, and definition of Single Sign‑On (SSO), outlines three SSO deployment types, introduces the Central Authentication Service (CAS) with detailed ticket mechanisms, and provides step‑by‑step SSO and Single Logout (SLO) processes for multiple applications.

AuthenticationCASSSO
0 likes · 11 min read
Understanding Single Sign‑On (SSO) and CAS Authentication Flows
Java Architecture Diary
Java Architecture Diary
Mar 13, 2023 · Information Security

Why MaxKey Stands Out as a Leading Open-Source SSO Solution

MaxKey is an open-source, Apache-licensed SSO platform that supports major authentication protocols, offers extensive login methods, provides multi-tenant IAM features, and includes detailed Linux deployment steps with code snippets and interface screenshots, making it a comprehensive solution for enterprise identity management.

AuthenticationIAMJava
0 likes · 6 min read
Why MaxKey Stands Out as a Leading Open-Source SSO Solution
Bilibili Tech
Bilibili Tech
Mar 10, 2023 · Information Security

Data Security Construction in Berserker Platform

The article outlines Berserker’s comprehensive data‑security framework—built on the CIA triad and 5A methodology—that unifies authentication, authorization, access control, asset protection, and auditing across Hive, Kafka, ClickHouse and ETL tasks, describes the migration from version 1.0 to 2.0 with a redesigned permission system, workspaces, Casbin performance tweaks, and previews future fine‑grained, lifecycle‑wide security enhancements.

Access ControlAuthenticationAuthorization
0 likes · 15 min read
Data Security Construction in Berserker Platform
Alibaba Cloud Native
Alibaba Cloud Native
Feb 27, 2023 · Cloud Native

How CNStack 2.0 Enables Multi‑Cloud, Multi‑Cluster Management with OCM

CNStack 2.0 introduces a cloud‑native multi‑cluster service built on Open Cluster Management, offering unified registration, lifecycle management, resource distribution, multi‑tenant authentication, and high‑availability cross‑cluster communication for Kubernetes clusters across clouds.

AuthenticationCluster RegistrationKubernetes
0 likes · 15 min read
How CNStack 2.0 Enables Multi‑Cloud, Multi‑Cluster Management with OCM
MaGe Linux Operations
MaGe Linux Operations
Feb 26, 2023 · Information Security

Mastering JWT: Secure Token Authentication with Spring Boot and Angular

This article explains what JSON Web Tokens are, their structure and security considerations, introduces the JJWT Java library, and provides a complete Spring Boot and Angular example—including Maven setup, Java filters, controllers, and front‑end code—to demonstrate secure token‑based authentication.

AngularAuthenticationJWT
0 likes · 19 min read
Mastering JWT: Secure Token Authentication with Spring Boot and Angular
Top Architect
Top Architect
Feb 11, 2023 · Backend Development

Comprehensive Guide to User Login Flow, Token Management, and Anonymous Access in Backend Systems

This article explains the complete user login process, including mobile verification, token generation, token expiration policies, request‑rate limiting with Redis, anonymous request handling, blacklist management, and provides full Java Spring code examples for implementing these backend authentication mechanisms.

API SecurityAuthenticationBackend
0 likes · 11 min read
Comprehensive Guide to User Login Flow, Token Management, and Anonymous Access in Backend Systems
Selected Java Interview Questions
Selected Java Interview Questions
Feb 6, 2023 · Backend Development

Backend Token Authentication, Rate Limiting, and Anonymous Access Design

This article explains a comprehensive backend user login flow, covering token generation, expiration policies, request validation, logout handling, anonymous access strategies, rate‑limiting with authorized tokens, path‑regex filtering, blacklist management, and includes a Spring‑Redis implementation example.

AuthenticationBackendRate Limiting
0 likes · 9 min read
Backend Token Authentication, Rate Limiting, and Anonymous Access Design
macrozheng
macrozheng
Feb 1, 2023 · Information Security

Secure Your Spring Boot APIs with JWT: A Step‑by‑Step Guide Using Spring Security

This article explains how to replace Shiro with Spring Security, integrate JWT for stateless authentication, configure the filter chain, set up the necessary Maven dependencies, write the security configuration, custom authentication and verification filters, and manage user details in a Spring Boot backend.

AuthenticationAuthorizationSpring Boot
0 likes · 16 min read
Secure Your Spring Boot APIs with JWT: A Step‑by‑Step Guide Using Spring Security
Java High-Performance Architecture
Java High-Performance Architecture
Jan 29, 2023 · Information Security

Master Spring Security: From Quick Start to Advanced JWT Authentication and RBAC

This comprehensive guide walks you through Spring Security fundamentals, setting up a Spring Boot project, configuring authentication with JWT and Redis, implementing RBAC permission management, customizing error handling, enabling CORS, and addressing CSRF, providing complete code examples and detailed explanations for secure backend development.

AuthenticationAuthorizationJWT
0 likes · 45 min read
Master Spring Security: From Quick Start to Advanced JWT Authentication and RBAC
Alibaba Cloud Developer
Alibaba Cloud Developer
Jan 28, 2023 · Backend Development

Designing a Scalable User Authentication Model: From Simple Login to Real‑Person Verification

This article walks through the evolution of a user system—from a basic email/phone login to third‑party OAuth, multi‑type user accounts, diversified password schemes, and real‑person (entity) verification—showcasing a flexible, extensible backend design that can handle rapid business growth.

AuthenticationSystem Designlogin
0 likes · 13 min read
Designing a Scalable User Authentication Model: From Simple Login to Real‑Person Verification
IT Architects Alliance
IT Architects Alliance
Jan 27, 2023 · Backend Development

Mastering Session Management and SSO: From Cookies to CAS with Redis

This article analyzes the limitations of traditional HTTP session mechanisms in single‑server and clustered environments, explains why session sharing is essential for multi‑system products, and presents practical solutions such as session replication and centralized Redis storage, followed by a detailed walkthrough of CAS‑based single sign‑on implementation with Java Spring code examples and a comparison to OAuth2.

AuthenticationCASJava
0 likes · 15 min read
Mastering Session Management and SSO: From Cookies to CAS with Redis
Java High-Performance Architecture
Java High-Performance Architecture
Nov 23, 2022 · Information Security

Master Spring Security with JWT: Build a Secure Java Backend

This tutorial walks through setting up Spring Security with JWT in a Spring Boot project, covering environment configuration, Maven dependencies, custom authentication handlers, permission evaluation, JWT filtering, and testing, providing complete code examples and explanations for building a robust backend authentication system.

AuthenticationAuthorizationJWT
0 likes · 22 min read
Master Spring Security with JWT: Build a Secure Java Backend
Top Architect
Top Architect
Nov 23, 2022 · Information Security

Comprehensive Guide to Front‑End Authentication and Authorization Methods

This article provides an in‑depth overview of authentication, authorization, and permission control concepts and compares ten common front‑end authentication techniques—including HTTP Basic Auth, Session‑Cookie, Token, JWT, SSO, OAuth 2.0, QR‑code login and one‑click login—detailing their workflows, advantages, drawbacks, and typical usage scenarios.

AuthenticationAuthorizationJWT
0 likes · 39 min read
Comprehensive Guide to Front‑End Authentication and Authorization Methods
Architect
Architect
Nov 19, 2022 · Information Security

Understanding SSO and OAuth2.0: Concepts, Differences, and Implementation

This article explains the principles of Single Sign-On (SSO) and OAuth2.0, compares their concepts, outlines typical SSO workflows using CAS, details OAuth2.0 authorization code flow, clarifies terminology differences, and discusses related security frameworks such as Spring Security and Shiro.

AuthenticationOAuth2.0SSO
0 likes · 9 min read
Understanding SSO and OAuth2.0: Concepts, Differences, and Implementation
Code Ape Tech Column
Code Ape Tech Column
Nov 15, 2022 · Information Security

Understanding Single Sign-On (SSO) with OAuth2.0 and Its Spring Boot Implementation

This article explains the principles and workflow of Single Sign‑On using OAuth2.0, illustrates the process with a real‑life analogy, and provides a complete Spring Boot example—including authorization server, client configuration, and role‑based access control—suitable for microservice architectures.

AuthenticationAuthorizationOAuth2
0 likes · 12 min read
Understanding Single Sign-On (SSO) with OAuth2.0 and Its Spring Boot Implementation
Programmer DD
Programmer DD
Nov 14, 2022 · Backend Development

Choosing Between JWT and Session: Pros, Cons, and Implementation Guide

This article compares JWT and session authentication, outlines their differences, advantages, security considerations, performance impacts, and provides a complete Java implementation with Redis integration, helping developers decide the best approach for their projects.

AuthenticationJWTJava
0 likes · 16 min read
Choosing Between JWT and Session: Pros, Cons, and Implementation Guide
Top Architect
Top Architect
Nov 4, 2022 · Information Security

Common Authentication Methods: HTTP Basic, Session‑Cookie, Token, and OAuth

This article reviews four widely used authentication mechanisms—HTTP Basic authentication, session‑cookie based authentication, token (JWT) authentication, and OAuth 2.0—explaining their workflows, security characteristics, and providing Node.js/Express code examples for each.

AuthenticationExpressHTTP Basic
0 likes · 18 min read
Common Authentication Methods: HTTP Basic, Session‑Cookie, Token, and OAuth
Architect's Guide
Architect's Guide
Nov 2, 2022 · Information Security

RBAC Permission Analysis and Spring Security Implementation with JWT and JSON Login

This article explains RBAC concepts and model classifications, demonstrates basic Spring Security setup, shows how to configure in‑memory and database authentication, integrates JWT for stateless token‑based access, implements JSON‑based login, and covers password encryption with BCrypt in a Spring Boot backend.

Access ControlAuthenticationJWT
0 likes · 15 min read
RBAC Permission Analysis and Spring Security Implementation with JWT and JSON Login
Laravel Tech Community
Laravel Tech Community
Nov 1, 2022 · Information Security

Google Introduces Passkey Key‑Login for Android and Chrome: A Secure Alternative to Passwords

Google announced that Android and Chrome will now support Passkey key‑login, a biometric‑based, public‑key authentication method that replaces traditional passwords, allowing users to create a secure credential on their device, sync it across platforms, and developers to integrate it via WebAuthn and related APIs.

AndroidAuthenticationFIDO
0 likes · 4 min read
Google Introduces Passkey Key‑Login for Android and Chrome: A Secure Alternative to Passwords
Architecture Digest
Architecture Digest
Oct 31, 2022 · Information Security

Understanding Single Sign-On (SSO): SAML, OAuth2, and OpenID Connect

This article explains the concept of Single Sign‑On (SSO), compares its major protocols—SAML, OAuth2, and OpenID Connect—covers their workflows, benefits, terminology, and provides guidance on when to choose each protocol for different application scenarios.

AuthenticationOAuth2OpenID Connect
0 likes · 11 min read
Understanding Single Sign-On (SSO): SAML, OAuth2, and OpenID Connect
Selected Java Interview Questions
Selected Java Interview Questions
Oct 29, 2022 · Information Security

Comprehensive Guide to Spring Security: Setup, Authentication, Authorization, and Advanced Configurations

This article provides a detailed tutorial on Spring Security, covering its core concepts, project setup, authentication flow, custom user details service, password encoding, login handling, role-based access control, CSRF protection, and integration with Thymeleaf, complete with code examples.

AuthenticationAuthorizationBackend
0 likes · 14 min read
Comprehensive Guide to Spring Security: Setup, Authentication, Authorization, and Advanced Configurations
MaGe Linux Operations
MaGe Linux Operations
Oct 26, 2022 · Information Security

Why Google’s New Passkey Is Replacing Passwords on Android and Chrome

Google announced that Android and Chrome will adopt Passkey, a biometric‑based, public‑key login system that replaces traditional passwords, offering cross‑platform support, phishing resistance, and cloud‑backed recovery, with developers able to integrate it via WebAuthn and Google Play Services.

AndroidAuthenticationChrome
0 likes · 4 min read
Why Google’s New Passkey Is Replacing Passwords on Android and Chrome
Architect
Architect
Oct 26, 2022 · Information Security

Choosing Between JWT and Session for Authentication: Technical Selection and Implementation

This article compares JWT and session authentication, discusses their differences, security, performance, and lifecycle considerations, and provides a complete Java implementation—including dependency configuration, token utilities, Redis integration, login/logout flows, password updates, and request interception—guiding developers to select the most suitable approach for their projects.

AuthenticationJWTJava
0 likes · 14 min read
Choosing Between JWT and Session for Authentication: Technical Selection and Implementation
Cloud Native Technology Community
Cloud Native Technology Community
Oct 25, 2022 · Cloud Native

Harbor: Cloud‑Native Docker Registry Authentication, Installation, and Image Push Guide

This article introduces Harbor, a CNCF‑hosted cloud‑native Docker registry, explains its token‑based authentication flow, details the required Kubernetes and Helm prerequisites, provides step‑by‑step installation and configuration instructions, and demonstrates how to push and pull images using containerd and Kubernetes.

AuthenticationDocker RegistryHarbor
0 likes · 17 min read
Harbor: Cloud‑Native Docker Registry Authentication, Installation, and Image Push Guide
ByteDance Cloud Native
ByteDance Cloud Native
Oct 24, 2022 · Cloud Native

How KubeGateway Solves kube‑apiserver Load‑Balancing and Traffic Governance

KubeGateway, a custom seven‑layer gateway built by ByteDance, eliminates kube‑apiserver load‑imbalance and adds comprehensive request governance—including routing, rate‑limiting, and degradation—by parsing HTTP2 traffic, supporting flexible policies, and transparently proxying requests without client changes.

AuthenticationKubernetesTraffic Management
0 likes · 14 min read
How KubeGateway Solves kube‑apiserver Load‑Balancing and Traffic Governance