







Autoswagger by Intruder - detect API auth weaknesses
OAuth API - Home
The Apigee OAuth API gives you a keychain for authenticating to Twitter, Salesforce, Salesforce Chatter, Facebook, Flickr, and Foursquare. Thousands of developers complain about the complexity of using OAuth. Now you can easily authenticate in one consistent way across several APIs and build apps faster.

Crafting a Better Atmospheric Auth Flow
Crafting a Better Atmospheric Auth Flow For the sake of your users ! By @brookie.blog
Crafting a Better Atmospheric Auth Flow
Crafting a Better Atmospheric Auth Flow For the sake of your users ! By @brookie.blog
Local First Auth Specification
Technical specification for Local First Auth Specification
OAuth Patterns - AT Protocol Docs - AT Protocol
Auth for AT Protocol application developers.

OAuth Patterns - AT Protocol Docs - AT Protocol
Auth for AT Protocol application developers.

Building AIP: An ATProtocol Authorization Gateway - Nick's Blog
OAuth is the first challenge developers face in the atmosphere. This post is about AIP, the authorization gateway we built at Graze Social to alleviate some of the pain.
Cross-App Authentication on AT Protocol
We recently built cross-app authentication between Roomy and OpenMeet using AT Protocol service auth JWTs. The idea came from @erlend.sh (his writeup), @zicklag.dev introduced me to PDS service auth, and @meri.garden contributed reviews. I made the implementation in both apps: A user logs into Roomy, navigates to an OpenMeet event, and is silently authenticated and able to use their account on OpenMeet without a second login. Full technical writeup: Cross-App Authentication on AT Protocol I’m ...

Demonstrating Proof-of-Possession (DPoP) - Auth0 Docs
Learn how to use Demonstrating Proof-of-Possession (DPoP) to sender constrain access tokens in Auth0.

Secure APIs Without JWT: Alternatives You Should Know About
The default way to authenticate an API is now with JSON Web Tokens. If you talk about securing an API, someone will always say, “just use…

Tailscale in the Hugging Face intrusion: The good news and the bad news
An AI agent used a stolen Tailscale auth key at Hugging Face. Workload identity federation, flow logs, and safer defaults could have reduced the risk.
Auth.js is now part of Better Auth · nextauthjs next-auth · Discussion #13252
Auth.js is joining forces with Better Auth We’re excited to share that Auth.js (formerly NextAuth.js) will now be maintained by the Better Auth team. Auth.js has powered authentication for a huge p...
alright protocol devs, some wonky bits: we revisited the recent service auth JWT harmonization proposal, and have a revision up that sticks with a single string 'aud' field. also touches on issuer 'kid', and makes 'lxm' mandatory for XRPC endpoints.
proposals/0014-service-auth-revised at main · bluesky-social/proposals
github.com