Authorization - DEV Community

Skip to content

DEV Community

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Auth By Example

Oct 8

What EU AI Act Article 12 and ISO 42001 mean for AI agent logs

#ai #security #compliance #authorization

2 min read

Auth By Example

Oct 8

GraphQL resolvers often check the top-level object and skip the nested ones

#graphql #authorization #security #api

1 min read

Auth By Example

Oct 7

An admin shouldn't be able to grant a role bigger than their own

#authorization #security #api #webdev

1 min read

Auth By Example

Oct 6

Four questions to ask about one real authorization flow

#webdev #saas #security #authorization

1 min read

Auth By Example

Oct 5

A valid token is not an AI agent audit trail

#security #ai #authorization #compliance

1 min read

DarkEdges

Oct 4

Step-up MFA, attenuation, and what's honestly not done

#security #authorization #pingfederate #datalog

6 min read

DarkEdges

Oct 4

Who mints the first Biscuit? PingFederate, token exchange and a hybrid model

#pingfederate #oauth #security #authorization

6 min read

DarkEdges

Oct 4

Local policy, shared facts: the receiver's Datalog authorizer

#security #authorization #datalog #javascript

4 min read

DarkEdges

Oct 4

Attenuating Biscuit tokens and signing the delegation chain

#security #authorization #javascript #webassembly

5 min read

DarkEdges

Oct 4

Delegating authority across companies with Biscuit tokens

#security #authorization #javascript #cloudflare

5 min read

Auth By Example

Sep 28

AI agents that inherit your OAuth token break least privilege

#authorization #ai #security #oauth

1 min read

Sanskriti Harmukh for Vultr

Sep 30

Deploying Ory Keto - Open-Source Permission and Access Control Server

#security #docker #devops #authorization

12 min read

yutianle

Sep 25

Authorization at the Object Level: Testing for BOLA Before Someone Else Does

#apisecurity #authorization #bola #owasp

4 min read

Auth By Example

Sep 24

OAuth on MCP is not the same as authorizing each tool call

#security #mcp #api #authorization

1 min read

Auth By Example

Sep 23

Read permission is not export permission

#security #authorization #api #webdev

1 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.