DEV Community

#authorization

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Flarum API Tokens Deserve Actor-Level Review

Flarum API Tokens Deserve Actor-Level Review

Comments
2 min read
Giving AI Agents Least Privilege

Giving AI Agents Least Privilege

Comments
2 min read
Fifty-three SpiceDB titles mark an authorization service that should not face the internet

Fifty-three SpiceDB titles mark an authorization service that should not face the internet

Comments
2 min read
JWT verifiers need an explicit token-purpose policy

JWT verifiers need an explicit token-purpose policy

Comments
3 min read
OpenAPI security schemes describe credentials while servers enforce authorization

OpenAPI security schemes describe credentials while servers enforce authorization

Comments
3 min read
Grafana viewers can reach more data than a dashboard shows

Grafana viewers can reach more data than a dashboard shows

Comments
3 min read
Elasticsearch API keys inherit an identity as well as a privilege list

Elasticsearch API keys inherit an identity as well as a privilege list

Comments
4 min read
Authorizing AI Agent Chains in Production

Authorizing AI Agent Chains in Production

Comments
22 min read
Evaluating Auth0 FGA? Four questions to ask before the Enterprise call

Evaluating Auth0 FGA? Four questions to ask before the Enterprise call

1
Comments
2 min read
Read RabbitMQ OAuth scopes as broker permissions, not login metadata

Read RabbitMQ OAuth scopes as broker permissions, not login metadata

Comments
3 min read
Separate gRPC transport identity from application authorization

Separate gRPC transport identity from application authorization

Comments
3 min read
Week 19: What the Student Is Allowed to See

Week 19: What the Student Is Allowed to See

Comments
4 min read
MCP tool authorization needs the request, token, and tool in one decision

MCP tool authorization needs the request, token, and tool in one decision

Comments
4 min read
Moving Authorization Out of Your App Code: If-Statements vs Cerbos vs SpiceDB, Measured

Moving Authorization Out of Your App Code: If-Statements vs Cerbos vs SpiceDB, Measured

5
Comments
21 min read
Three authorisation holes in one helpdesk stack: what CVE-2026-111937, CVE-2026-111938 and CVE-2026-111939 have in common

Three authorisation holes in one helpdesk stack: what CVE-2026-111937, CVE-2026-111938 and CVE-2026-111939 have in common

Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.