DEV Community

#identity

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
WIMSE HTTP Signatures Deep Dive: Proof of Possession That Survives the Load Balancer

WIMSE HTTP Signatures Deep Dive: Proof of Possession That Survives the Load Balancer

Comments
10 min read
WIMSE Workload Credentials -03: The WIT Finally Gets a Validation Procedure

WIMSE Workload Credentials -03: The WIT Finally Gets a Validation Procedure

Comments
11 min read
OpenID4VCI Deep Dive: 1.0 Final, the Errata, Interactive Authorization in 1.1, and Server-to-Server

OpenID4VCI Deep Dive: 1.0 Final, the Errata, Interactive Authorization in 1.1, and Server-to-Server

Comments
12 min read
SD-JWT VC Deep Dive: vct, Issuer Keys, Type Metadata, and the URLs a Credential Makes You Fetch

SD-JWT VC Deep Dive: vct, Issuer Keys, Type Metadata, and the URLs a Credential Makes You Fetch

Comments
14 min read
Signing What Was in the Context Window: draft-durga-wimse-ctx-isolation and Its Self-Reported Taint

Signing What Was in the Context Window: draft-durga-wimse-ctx-isolation and Its Self-Reported Taint

Comments
10 min read
DCHP: One CBOR Request for mdoc and SD-JWT VC, In Person and Online

DCHP: One CBOR Request for mdoc and SD-JWT VC, In Person and Online

Comments
11 min read
identity-deep-dive: A Weekly Briefing and a Sourced Spec Map for OAuth, WIMSE, and OpenID

identity-deep-dive: A Weekly Briefing and a Sourced Spec Map for OAuth, WIMSE, and OpenID

Comments
5 min read
Rote's OAuth Merge Endpoint Let One User Pull Another Identity Into Their Account

Rote's OAuth Merge Endpoint Let One User Pull Another Identity Into Their Account

Comments
3 min read
Contao's Edit-Multiple Action Allowed a Filemount User to Leave the Assigned Folder

Contao's Edit-Multiple Action Allowed a Filemount User to Leave the Assigned Folder

Comments
3 min read
Crawl4AI Let an API Client Inject JavaScript Through Selector and Wait Fields

Crawl4AI Let an API Client Inject JavaScript Through Selector and Wait Fields

Comments
3 min read
Traccar Let an Empty Password Become a Valid LDAP Login

Traccar Let an Empty Password Become a Valid LDAP Login

Comments
3 min read
ByteStash API Keys Survived the Account Deactivation They Should Have Lost

ByteStash API Keys Survived the Account Deactivation They Should Have Lost

Comments
2 min read
The agent is a user without a license

The agent is a user without a license

3
Comments
4 min read
LLDAP's small directory surface still joins LDAP and web authority

LLDAP's small directory surface still joins LDAP and web authority

Comments
3 min read
LDAP signing and channel binding protect different parts of a session

LDAP signing and channel binding protect different parts of a session

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.