BestHub
Sign in
Tagged articles

Authentication

721 articles · Page 8 of 8
ITFLY8 Architecture Home
ITFLY8 Architecture Home
Dec 17, 2016 · Information Security

How to Implement Robust Single Sign-On Across Multiple Domains

This article explores various single sign-on strategies—including shared Redis sessions, OpenID-based authentication, cookie-driven OpenID storage, and JSONP cross-domain solutions—detailing their architectures, limitations, and security considerations, and offers practical guidance for building scalable, secure SSO in multi-domain environments.

AuthenticationOpenIDSSO
0 likes · 9 min read
How to Implement Robust Single Sign-On Across Multiple Domains
Efficient Ops
Efficient Ops
Sep 6, 2016 · Information Security

How to Secure Microservice Access: Design Principles and Practical Solutions

This article examines the evolution from traditional monolithic access security to modern microservice architectures, outlines key design principles, compares four common authentication schemes, and demonstrates a Spring Cloud Security implementation using OAuth2 and UAA for fine‑grained, token‑based protection.

AuthenticationMicroservicesOAuth2
0 likes · 17 min read
How to Secure Microservice Access: Design Principles and Practical Solutions
Qunar Tech Salon
Qunar Tech Salon
Aug 4, 2016 · Fundamentals

The History and Evolution of URLs: Paths, Fragments, Queries, and Authentication

This article traces the origin and development of URLs from Tim Berners‑Lee's 1992 invention of HTTP, HTML and the universal document identifier, through the standardisation of syntax, query strings, fragments and authentication, highlighting key proposals, code examples and the ongoing debates about their purpose.

AuthenticationHTMLHTTP
0 likes · 17 min read
The History and Evolution of URLs: Paths, Fragments, Queries, and Authentication
High Availability Architecture
High Availability Architecture
Jul 1, 2016 · Backend Development

High‑Availability Design and Optimizations of Didi’s Passport Authentication Service

This article details Didi’s Passport authentication system architecture, describing how language migration, service decomposition, flexible ticket and SMS code designs, multi‑region active‑active deployment, an independent Argus access‑control layer, and interface splitting together achieve high availability and low latency under extreme traffic peaks.

AuthenticationTicketdistributed-systems
0 likes · 18 min read
High‑Availability Design and Optimizations of Didi’s Passport Authentication Service
WeChat Client Technology Team
WeChat Client Technology Team
May 10, 2016 · Information Security

How We Built mmtls: A High‑Performance, Low‑Latency Secure Protocol for WeChat

mmtls is a custom, lightweight secure communication protocol designed for WeChat that encrypts all client‑to‑server traffic, offering confidentiality, integrity, low latency, scalability, and forward secrecy by adapting TLS 1.3 concepts with optimized handshake, key‑exchange, record, and replay‑protection mechanisms.

AuthenticationTLSWeChat
0 likes · 32 min read
How We Built mmtls: A High‑Performance, Low‑Latency Secure Protocol for WeChat
Efficient Ops
Efficient Ops
Jan 24, 2016 · Information Security

From 1.0 to 3.0: The Evolution and Architecture of Jumpserver Bastion Host

This article chronicles the development milestones, architectural design, and practical lessons learned while building Jumpserver—from its humble 1.0 prototype to the feature‑rich 3.0 release—offering deep insights for developers and security engineers interested in open‑source bastion solutions.

AuditAuthenticationAuthorization
0 likes · 21 min read
From 1.0 to 3.0: The Evolution and Architecture of Jumpserver Bastion Host
Architects Research Society
Architects Research Society
Nov 18, 2015 · Backend Development

Playful Web Development, Part 1: Managing User Authentication with Play Framework and Scala

This tutorial walks you through building a starter authentication application using Play Framework, Scala, Silhouette, and MongoDB, covering email sign‑up, password reset, OAuth1 Twitter login, and user‑aware views, while explaining Play's reactive, asynchronous architecture for scalable backend development.

AuthenticationMongoDBPlay Framework
0 likes · 6 min read
Playful Web Development, Part 1: Managing User Authentication with Play Framework and Scala
21CTO
21CTO
Oct 28, 2015 · Information Security

How Single Sign-On Works: Trust Storage, Validation, and Secure Implementation

This article explains the concept of Single Sign-On (SSO), why it’s essential for large web platforms, the core steps of storing and validating trust, common cookie‑based approaches, their security drawbacks, and how server‑side solutions using distributed caches and digital signatures can provide a robust, cross‑domain authentication system.

AuthenticationCookieSSO
0 likes · 5 min read
How Single Sign-On Works: Trust Storage, Validation, and Secure Implementation
Architect
Architect
Oct 21, 2015 · Backend Development

Introduction to REST API Design and Security Practices

This article explains the fundamentals of REST APIs, outlines HTTP methods, recommends JSON payloads, and details authentication, authorization, URL filtering, encryption, rate limiting, error handling, and other security measures for building robust backend services.

AuthenticationAuthorizationBackend Development
0 likes · 10 min read
Introduction to REST API Design and Security Practices
21CTO
21CTO
Oct 15, 2015 · Information Security

How Single Sign-On (SSO) Boosts Enterprise Efficiency and Security

The article explains why enterprises need a unified Single Sign-On (SSO) system, detailing its benefits for user convenience, administrator workload reduction, security improvements, and integration standards, while comparing cookie‑ and session‑based implementations and illustrating the CAS open‑source solution.

AuthenticationCASSSO
0 likes · 15 min read
How Single Sign-On (SSO) Boosts Enterprise Efficiency and Security
dbaplus Community
dbaplus Community
Oct 12, 2015 · Databases

Essential PostgreSQL Security Checklist: Authentication, Encryption, Auditing and More

This comprehensive guide outlines practical PostgreSQL security measures—including hardened authentication, encrypted data transmission, column‑level encryption, strict permission controls, backup strategies, auditing, patch management, and resource monitoring—to help DBAs protect their databases from unauthorized access and attacks.

AuthenticationPostgreSQLauditing
0 likes · 15 min read
Essential PostgreSQL Security Checklist: Authentication, Encryption, Auditing and More
Architect
Architect
Sep 7, 2015 · Information Security

Introducing dex: CoreOS Open Source OpenID Connect Identity Provider

CoreOS’s newly announced open‑source project dex is an OpenID Connect‑compliant identity provider that offers secure, standards‑based authentication across web, mobile, CLI and automation environments, with extensible connectors, robust security practices, and a real‑world deployment example at Tectonic.com.

AuthenticationDEXOpenID Connect
0 likes · 9 min read
Introducing dex: CoreOS Open Source OpenID Connect Identity Provider
MaGe Linux Operations
MaGe Linux Operations
Aug 17, 2015 · Fundamentals

How Email Works: From DNS Queries to Secure Mail Delivery

This comprehensive guide explains the architecture and workflow of email systems, covering DNS MX record lookup, the roles of MUA, MTA, MDA, MRA, authentication mechanisms, encryption, and spam/virus filtering, providing operators with essential knowledge to manage and secure mail services.

AuthenticationDNSSMTP
0 likes · 17 min read
How Email Works: From DNS Queries to Secure Mail Delivery