# oauth2 Published articles for oauth2. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Appwrite Init 2026 recap: Everything we shipped DevFeed: [Appwrite Init 2026 recap: Everything we shipped]() Original publisher: [Read original article]() Author: Aishwari Pahwa Published: 2026-09-15T00:00:00Z Content type: release Language: en Sources: [Appwrite Blog]() Topics: [Appwrite](), [releases](), [PostgreSQL](), [Amazon S3](), [Firewall](), [OAuth 2.0](), [Self-hosted]() Tags: [2](), [firewall](), [init](), [oauth2](), [postgresql](), [recap](), [release](), [releases](), [s3](), [self-hosted]() ### AI overview An Appwrite Init 2026 recap covering five days of launches, including Appwrite 2.0, a redesigned Console, native PostgreSQL, VectorsDB, DocumentsDB, MySQL, S3-compatible Storage, Firewall, OAuth2, and Domains. ### Source excerpt An Appwrite Init 2026 recap of all five days of launches, from Appwrite 2.0 and native PostgreSQL to VectorsDB, S3 support, Firewall, OAuth2, and Domains. ## Turn your app into an MCP server with the Appwrite OAuth2 server DevFeed: [Turn your app into an MCP server with the Appwrite OAuth2 server]() Original publisher: [Read original article]() Author: Atharva Deosthale Published: 2026-09-04T00:00:00Z Content type: tutorial Language: en Sources: [Appwrite Blog]() Topics: [Appwrite](), [Model Context Protocol](), [OAuth 2.0](), [Authorization](), [Claude Code](), [Serverless](), [web applications](), [Databases]() Tags: [ai](), [ai-tools](), [app](), [auth](), [authorization](), [browser](), [claude](), [claude-code](), [code](), [databases](), [http](), [mcp](), [mcp-server](), [oauth2](), [remote-mcp-server](), [serverless](), [tutorial](), [tutorials](), [web](), [web-app]() ### AI overview This tutorial explains how to turn an Appwrite-based application into a remote MCP server. It uses an Appwrite Function, the OAuth2 server included in an Appwrite project, and a consent screen so AI tools such as Claude Code can access and act on behalf of signed-in users. ### Source excerpt Build a remote MCP server for your product, host it on Appwrite Functions, and let AI tools like Claude Code sign in through the OAuth2 server built into your Appwrite project. ## Build a memory MCP server on Appwrite DevFeed: [Build a memory MCP server on Appwrite]() Original publisher: [Read original article]() Author: Atharva Deosthale Published: 2026-09-04T00:00:00Z Content type: tutorial Language: en Sources: [Appwrite Blog]() Topics: [Appwrite](), [Model Context Protocol](), [MCP Server](), [OAuth 2.0](), [Serverless](), [Databases](), [Embeddings](), [Claude Code](), [web applications]() Tags: [ai](), [ai-assistants](), [ai-tools](), [api](), [claude](), [claude-code](), [embeddings](), [mcp](), [mcp-server](), [memory](), [net](), [oauth2](), [sdk](), [serverless](), [tutorial](), [tutorials]() ### AI overview This tutorial builds Recall, a small persistent-memory app on Appwrite. It hosts a stateless remote MCP server in an Appwrite Function, stores embedded memories in VectorsDB for similarity search, and uses OAuth2 for user-authorized access. It also explains connecting Claude Code to the server. ### Source excerpt Give your AI tools a shared, persistent memory. Host a stateless MCP server on Appwrite Functions, store memories in VectorsDB, and protect it with your project's OAuth2 server. ## Announcing the Appwrite OAuth2 server: Turn your project into an identity provider DevFeed: [Announcing the Appwrite OAuth2 server: Turn your project into an identity provider]() Original publisher: [Read original article]() Author: Matej Baฤo Published: 2026-09-04T00:00:00Z Content type: release Language: en Sources: [Appwrite Blog]() Topics: [Appwrite](), [OAuth 2.0](), [OpenID connect (OIDC)](), [Authorization](), [API](), [internal developer portal]() Tags: [announcements](), [api](), [authorization](), [developer-portal](), [github](), [oauth](), [oauth2](), [oidc](), [openid-connect](), [product](), [sdks]() ### AI overview Appwrite announces an OAuth2 server that lets projects act as OAuth 2.1 and OpenID Connect providers. Other applications can register as clients, obtain user-approved scoped access to APIs, and use standard authorization and token flows. ### Source excerpt Your Appwrite project can now act as an OAuth 2.1 and OpenID Connect provider, so other apps can offer Sign in with your product and request scoped access to your APIs. ## Announcing Appwrite Apps: Create apps that build on your users' Appwrite projects DevFeed: [Announcing Appwrite Apps: Create apps that build on your users' Appwrite projects]() Original publisher: [Read original article]() Author: Atharva Deosthale Published: 2026-09-04T00:00:00Z Content type: release Language: en Sources: [Appwrite Blog]() Topics: [Appwrite](), [OAuth](), [OAuth 2.0](), [API keys](), [Authorization](), [API](), [migration]() Tags: [announcements](), [api-keys](), [apis](), [authorization](), [developers](), [documentation](), [oauth](), [oauth2](), [product]() ### AI overview Appwrite announces Appwrite Apps, allowing organizations to register applications that serve other Appwrite developers. The feature uses OAuth 2.1 and OpenID Connect for consent-based, scoped access to selected projects and organizations instead of pasted API keys. ### Source excerpt Register an app in your organization and build dashboards, deployment tools, CLIs, and agents for other Appwrite developers, with consent-based, scoped tokens instead of pasted API keys. ## How to add Sign in with Appwrite to your app DevFeed: [How to add Sign in with Appwrite to your app]() Original publisher: [Read original article]() Author: Matej Baฤo Published: 2026-09-04T00:00:00Z Content type: tutorial Language: en Sources: [Appwrite Blog]() Topics: [Appwrite](), [OAuth 2.0](), [Authentication](), [pkce]() Tags: [authentication](), [oauth2](), [pkce](), [sign-in](), [tutorials]() ### AI overview A tutorial for enabling Appwrite's built-in OAuth2 provider so users can sign in to an app with their Appwrite account. It explains the consent and authorization-code flow, PKCE protection, and provider setup in the Appwrite Console. ### Source excerpt Let users log in with their Appwrite account using the built-in OAuth2 provider. Learn how the flow works and how to set it up end to end. ## Meet the Symfony Core Team at the API Platform Conference 2026! DevFeed: [Meet the Symfony Core Team at the API Platform Conference 2026!]() Original publisher: [Read original article]() Author: Cรฉcile HAMEREL Published: 2026-09-02T14:30:00Z Content type: news Language: en Sources: [Symfony Blog]() Topics: [API](), [Symfony](), [PHP](), [migration](), [Domain-driven design (DDD)](), [JSON Web Tokens](), [OAuth 2.0](), [OpenID connect (OIDC)](), [Model Context Protocol (MCP)]() Tags: [2026](), [ai-agents](), [api-platform](), [conference](), [event](), [mcp](), [migration](), [oauth2](), [oidc](), [php](), [symfony]() ### AI overview The API Platform Conference 2026 will take place in Lille, France, on September 17-18. The event will feature nearly 30 talks, including sessions by Symfony Core Team members on migration, API security, DDD, HTTP headers, FrankenPHP, AI agents, and MCP. ### Source excerpt The API Platform Conference, the international event dedicated to the API Platform framework and its ecosystem, will take place in two weeks in Lille, France, on September 17-18, 2026. Nearly 30 talks are scheduled, in both French and English, covering... ## Announcing Keycloak's Identity Summit: KEYCONF26 DevFeed: [Announcing Keycloak's Identity Summit: KEYCONF26]() Original publisher: [Read original article]() Author: Nathalia Pinesi, Alexander Schwartz Published: 2026-05-02T00:00:00Z Content type: article Language: en Sources: [Keycloak Blog]() Topics: [Keycloak](), [IAM](), [identity and access management](), [OAuth 2.0](), [OpenID connect (OIDC)](), [Single sign-on (SSO)](), [Kubernetes](), [Security]() Tags: [2026](), [conference](), [identity](), [identity-and-access-management](), [idm](), [implementation](), [kerberos](), [keycloak](), [kubernetes](), [ldap](), [oauth2](), [oidc](), [openid-connect](), [saml](), [security](), [sso](), [summit]() ### AI overview Keycloak announces KEYCONF26, its annual Identity Summit for the Keycloak user community, taking place in Prague on October 8, 2026. The event will feature interactive sessions, practical discussions, networking, and a call for speakers and sponsors. ### Source excerpt Our annual conference dedicated to the Keycloak user community returns, with even more content and networking opportunities than last year. It's the perfect place to interact, learn, share, and exchange insights and real-world use cases, network with fellow experts, users, and contributors. ๐Ÿ“ Introducing KEYCONF26 - taking place in Prague on October 8th, 2026! This year's edition of the Keycloak Identity Summit features interactive sessions, and even more opportunities to engage with the people shaping the future of identity and access management. Call for sessions The call for sessions is open until May 24th, 2026 -- we'd love to hear from you! We're looking for sessions on topics such as: Keycloak deployment and operations at scale Human and non-human identities in the world of AI OAuth2, OIDC, and evolving identity standards Security best practices and hardening EU Digital Identity Wallets and eIDAS Migration stories and real-world use cases Extending and customizing Keycloak Submit your proposal now! What to expect at KEYCONF26 Inspiring Keynote Speaker Hear from Hannah Short, Team Lead for Identity and Access Management at CERN, how they are using Keycloak as a highly performant and reliable SSO running on Kubernetes. Connect with like-minded professionals From long-time contributors to those just starting their IAM journey, KEYCONF26 is the perfect place to meet others working with identity, OAuth2, OIDC, and more. Networking lunch Our extended lunch break is designed to help you meet fellow attendees, swap ideas, and build meaningful professional connections in a relaxed setting. Business drinks Stick around after the last session for informal networking over drinks. Want to sponsor this year's Business Drink? Get in touch with us--we'd love to partner with you! Expert sessions and real-world use cases Gain practical insights into Keycloak implementation, security improvements, OAuth2 best practices, and evolving identity standards. Learn how to use EU Digital ## Resetting Mutt's terminal after OAuth2 / GPG DevFeed: [Resetting Mutt's terminal after OAuth2 / GPG]() Original publisher: [Read original article]() Published: 2026-04-01T01:23:28Z Content type: tutorial Language: en Sources: [Signs of Triviality]() Topics: [OAuth 2.0](), [Terminal]() Tags: [flow](), [how-to](), [oauth2](), [terminal]() ### AI overview A quick fix for resetting Mutt's terminal after shelling out to GPG during an OAuth2 flow. ### Source excerpt A quick fix for how to get mutt's terminal reset after shelling out to GPG during the OAuth2 flow. ## How to Integrate OAuth2 Into a Django/DRF Back End Without Losing Control DevFeed: [How to Integrate OAuth2 Into a Django/DRF Back End Without Losing Control]() Original publisher: [Read original article]() Author: Prachi Kothiyal Published: 2026-02-06T10:58:21Z Content type: tutorial Language: en Sources: [Backend Archives | Talent500 blog]() Topics: [Django](), [OAuth 2.0](), [Back end](), [Authentication](), [API](), [Framework]() Tags: [a-minimal-view-for-token-exchange](), [api](), [authentication](), [back-end](), [backend](), [configuring-back-end-authentication](), [django](), [newsletters](), [oauth2](), [rest](), [server-side-vs-client-side-oauth2-flows](), [testing-and-reliability-considerations](), [what-the-back-end-needs-to-do](), [why-rely-on-a-social-auth-library]() ### AI overview A practical guide to integrating OAuth2 social login into a Django or Django REST Framework back end. It recommends letting the front end handle the provider flow while the back end validates third-party tokens, maps social identities to local accounts, and issues API credentials. ### Source excerpt When a Django or Django REST Framework (DRF) back end is already handling authentication, adding "Log in with Google" or [...] The post How to Integrate OAuth2 Into a Django/DRF Back End Without Losing Control appeared first on Talent500 blog. ## Using on-behalf-of flow for Entra-based MCP servers DevFeed: [Using on-behalf-of flow for Entra-based MCP servers]() Original publisher: [Read original article]() Author: Pamela Fox (noreply@blogger.com) Published: 2026-01-16T20:34:00Z Content type: tutorial Language: en Sources: [Pamela Fox]() Topics: [Model Context Protocol (MCP)](), [Entra ID](), [OAuth 2.0](), [Authentication](), [Python](), [API](), [Authorization](), [client]() Tags: [api](), [authentication](), [authorization](), [delegation](), [identity](), [mcp](), [mcp-server](), [microsoft](), [oauth2](), [python]() ### AI overview This tutorial explains how to use Microsoft Entra authentication and the OAuth on-behalf-of flow in a Python FastMCP server. It describes how an MCP server can use a user's identity to call another API, such as Microsoft Graph, and how FastMCP implements dynamic client registration through an OAuth proxy for arbitrary MCP clients. ### Source excerpt In December, we presented a series about MCP, culminating in a session about adding authentication to MCP servers. I demoed a Python MCP server that uses Microsoft Entra for authentication, requiring users to first login to the Microsoft tenant before they could use a tool. Many developers asked how they could take the Entra integration further, like to check the user's group membership or query their OneDrive. That requires using an "on-behalf-of" flow, also known as "delegation" in OAuth, where the MCP server uses the user's identity to call another API, like the Microsoft Graph API. In this blog post, I will explain how to use Entra with OBO flow in a Python FastMCP server. How MCP servers can use Entra authentication The MCP authorization specification is based on OAuth2, but with some additional features tacked on top. Every MCP client is actually an OAuth2 client, and each MCP server is an OAuth2 resource server. MCP auth adds these features to help clients determine how to authorize a server: Protected resource metadata (PRM): Implemented on the MCP server, provides details about the authorization server and method Authorization server metadata: Implemented on the authorization server, gives URLs for OAuth2 endpoints Additionally, to allow MCP servers to work with arbitrary MCP clients, MCP auth supports either of these client registration methods: Dynamic Client Registration (DCR): Implemented on the authorization server, it can register new MCP clients as OAuth2 clients, even if it hasn't seen them before. Client ID Metadata Documents (CIMD): An alternative to DCR, this requires both the MCP client to make a CIMD document available on a server, and requires the authorization server to fetch the CIMD document for details about the client. Microsoft Entra does support authorization server metadata, but it does not support either DCR or CIMD. That's actually fine if you are building an MCP server that's only going to be used with pre-authorized clients, like i ## Announcing the Supabase Remote MCP Server DevFeed: [Announcing the Supabase Remote MCP Server]() Original publisher: [Read original article]() Author: Greg Richardson Published: 2025-10-03T07:00:00Z Content type: release Language: en Sources: [Supabase Blog]() Topics: [Supabase](), [Model Context Protocol (MCP)](), [AI Agent](), [OAuth 2.0](), [Web]() Tags: [chatgpt](), [claude](), [claude-code](), [http](), [large-language-models-llms](), [mcp](), [mcp-server](), [oauth2](), [remote-mcp-server]() ### AI overview Supabase announces a remote MCP server that connects Supabase projects with AI agents including ChatGPT, Claude, and Builder.io through a single URL. The release adds OAuth2-based browser authentication, support for local Supabase instances created through the CLI, and additional MCP tools such as Edge Function deployment, log retrieval, project scoping, and read-only access. It also introduces remote HTTP transport alongside the existing local stdio approach. ### Source excerpt Remote MCP server enables AI agents to connect with Supabase projects. ## Announcing Keycloak's Identity Summit: KEYCONF25 DevFeed: [Announcing Keycloak's Identity Summit: KEYCONF25]() Original publisher: [Read original article]() Author: Nathalia Pinesi Published: 2025-04-28T00:00:00Z Content type: news Language: en Sources: [Keycloak Blog]() Topics: [Keycloak](), [IAM](), [identity and access management](), [OAuth 2.0](), [OpenID connect (OIDC)]() Tags: [2025](), [event](), [iam](), [identity](), [idm](), [kerberos](), [keycloak](), [ldap](), [oauth2](), [oidc](), [openid-connect](), [saml](), [sso]() ### AI overview Keycloak announces KEYCONF25, its Identity Summit, taking place in Amsterdam on August 28, 2025. The event will feature sessions on Keycloak, identity and access management, OAuth2, OIDC, security, and identity standards, with networking opportunities and calls for sponsors and speakers. ### Source excerpt KeyConf24 was a fantastic success, bringing together identity and access management professionals, developers, and community members from across Europe. The day was packed with insightful talks, deep dives into Keycloak, and incredible conversations between some of the brightest minds in IAM. Now, we're excited to take things even further. ๐Ÿ“ Introducing KEYCONF25 - taking place in Amsterdam on August 28th, 2025! This year's edition of the Keycloak Identity Summit promises more content, more connections, and even more opportunities to engage with the people shaping the future of identity and access management. What to expect at KEYCONF25 Inspiring Keynote Speakers Hear directly from thought leaders, core contributors, and experts working on the cutting edge of Keycloak and open identity standards. Connect with like-minded professionals From long-time contributors to those just starting their IAM journey, KEYCONF25 is the perfect place to meet others working with identity, OAuth2, OIDC, and more. Networking lunch Our extended lunch break is designed to help you meet fellow attendees, swap ideas, and build meaningful professional connections in a relaxed setting. Business drinks Stick around after the last session for informal networking over drinks. Want to sponsor this year's Business Drink? Get in touch with us--we'd love to partner with you! Expert sessions and real-world use cases Gain practical insights into Keycloak implementation, security improvements, OAuth2 best practices, and evolving identity standards. Topics and speakers to be announced soon! Save the date and join us! Whether you're a developer, architect, security specialist, or product owner, KEYCONF25 is your opportunity to gain knowledge, grow your network, and contribute to the future of the Keycloak community. ๐Ÿ“… August 28th, 2025 ๐Ÿ“ Amsterdam, Netherlands Tickets are now available at keyconf.dev - secure your spot early! Want to get involved? We're actively seeking sponsors and speakers for KEYCONF2 ## Lessons Learned from Deploying Keycloak with Angular and BFF DevFeed: [Lessons Learned from Deploying Keycloak with Angular and BFF]() Original publisher: [Read original article]() Author: brakmic Published: 2025-01-31T18:05:38Z Content type: tutorial Language: en Sources: [Harris Brakmic - Coding]() Topics: [Angular](), [BFF](), [Keycloak](), [Deployment](), [Express](), [Back end](), [Windows](), [web applications](), [OAuth 2.0](), [OpenID connect (OIDC)](), [HTTP]() Tags: [angular](), [backend](), [bff](), [coding](), [deployment](), [express](), [http](), [keycloak](), [oauth2](), [oidc](), [typescript](), [web](), [windows]() ### AI overview This article describes deploying an Angular application, an Express.js backend-for-frontend, and a Keycloak server on Windows Server with IIS. It focuses on issues that emerged when moving from a local setup to production, including session handling, secure communication, URL rewriting, TLS termination, and running Node.js inside IIS. ### Source excerpt This article details the deployment of an Angular application, a backend-for-frontend (BFF) built with Express.js, and a Keycloak server on a Windows Server using IIS. It explores the challenges encountered when moving from a local setup to a production environment, including session handling, secure communication, and configuring KeycloakStrategy. ## Keycloak, Angular, and the BFF Pattern DevFeed: [Keycloak, Angular, and the BFF Pattern]() Original publisher: [Read original article]() Author: brakmic Published: 2025-01-26T10:58:39Z Content type: tutorial Language: en Sources: [Harris Brakmic - Coding]() Topics: [BFF](), [Angular](), [Authentication](), [Express](), [Security](), [web applications]() Tags: [angular](), [authentication](), [bff](), [coding](), [express](), [keycloak](), [oauth2](), [oidc](), [pkce](), [security](), [typescript](), [web](), [web-applications]() ### AI overview This tutorial explains how to use the Backend for Frontend pattern with Angular, Express.js, and Keycloak to secure a web application. It describes handling OAuth2 and PKCE authentication flows server-side, storing tokens in server-side sessions, and keeping sensitive data out of the browser. ### Source excerpt This article explains implementing the BFF pattern with Angular, Express.js, and Keycloak to secure web applications. Learn how to handle authentication flows server-side, eliminate client-side token storage, and maintain separation between frontend and security operations. Includes practical configuration steps for Keycloak realms, Express.js sessions, and Angular's authentication service. ## PKCE with Keycloak and Passport DevFeed: [PKCE with Keycloak and Passport]() Original publisher: [Read original article]() Author: brakmic Published: 2025-01-20T12:09:12Z Content type: tutorial Language: en Sources: [Harris Brakmic - Coding]() Topics: [pkce](), [OAuth 2.0](), [OpenID connect (OIDC)](), [Authentication](), [Security](), [Docker](), [Docker Compose](), [Single-page application (SPA)](), [Testing](), [TypeScript]() Tags: [authentication](), [coding](), [docker](), [javascript](), [keycloak](), [oauth2](), [oidc](), [pkce](), [security](), [testing](), [typescript]() ### AI overview A practical guide to using passport-keycloak-oauth2-oidc-portable with Keycloak, OAuth2, and OpenID Connect. It covers switching the library to TypeScript, adding integration and end-to-end tests, running a local Keycloak instance with Docker Compose, and implementing PKCE for public clients such as single-page applications. ### Source excerpt Discover how passport-keycloak-oauth2-oidc-portable integrates Keycloak with OAuth2 and OpenID Connect (OIDC) using the secure Proof Key for Code Exchange (PKCE) protocol. This article explores implementing PKCE to protect public clients like desktop and single-page applications from common authentication vulnerabilities such as CSRF and authorization code interception. Learn about setting up a Keycloak test instance with Docker to facilitate seamless local development and testing. Through a practical example, see how PKCE aligns with modern security standards, providing a robust and efficient authentication mechanism for your applications. Whether you're enhancing existing authentication flows or building new solutions, this guide offers valuable insights into leveraging PKCE, Keycloak, and Passport.js to create secure authentication frameworks. ## Codename One Push API Requires a Firebase JSON Key for Android Notifications DevFeed: [Codename One Push API Requires a Firebase JSON Key for Android Notifications]() Original publisher: [Read original article]() Author: Steve Hannah Published: 2024-06-08T00:00:00Z Content type: release Language: en Sources: [CodeName One]() Topics: [Android](), [push-notification](), [API](), [Firebase](), [migration](), [OAuth 2.0](), [JSON]() Tags: [android](), [api](), [firebase](), [json](), [migration](), [oauth2](), [push-notification]() ### AI overview Codename One announces that its push notification server API now requires a URL to a Firebase service-account JSON key instead of an FCM API key for Android push notifications. The change follows Google's migration from legacy FCM APIs to the v1 HTTP API. ### Source excerpt We have made some upgrades to our push notification server API. If you deploy apps to Android and use push notifications, you will need to make a small change to the server-side code that sends the HTTP request to our push server. If you do not send push notifications to Android devices, you can ignore this PSA. The Short Version Our Push API now requires a JSON key instead of the old FCM API key. For example, the following is a template for a push notification, (copied from the push cheatsheet). ## Recap from KubeCon + CloudNativeCon Europe 2024 DevFeed: [Recap from KubeCon + CloudNativeCon Europe 2024]() Original publisher: [Read original article]() Author: Thomas Darimont Published: 2024-04-15T00:00:00Z Content type: article Language: en Sources: [Keycloak Blog]() Topics: [Keycloak](), [Cloud Native Ecosystem](), [IAM](), [Kubernetes](), [OAuth 2.0](), [Passkeys](), [Open Policy Agent]() Tags: [cloud-native-ecosystem](), [iam](), [idm](), [kerberos](), [keycloak](), [kubecon](), [kubernetes](), [ldap](), [oauth2](), [open-policy-agent](), [openid](), [openid-connect](), [recap](), [saml](), [security](), [sso]() ### AI overview A recap of Keycloak's presence at KubeCon + CloudNativeCon Europe 2024, covering talks on OAuth2 Token Exchange for microservice API security, Keycloak's use in CERN's IAM infrastructure, federated IAM for Kubernetes with OpenFGA, and recent support for Passkeys, OAuth 2.1, and OpenID for Verifiable Credentials. ### Source excerpt After a packed week of fantastic talks at KubeCon + CloudNativeCon Europe 2024 in Paris, we're delighted to share our impressions with the rest of the Keycloak community. Keycloak and OAuth2 Token Exchange for Microservice API Security The presence of Keycloak in many presentations highlighted its importance in the cloud-native ecosystem. Notably, the talk "OAuth2 Token Exchange for Microservice API Security" by Ahmet Soormally & Letz Yaara on OAuth2 Token Exchange (RFC 8693) underscored its application in microservice security and pinpointed areas for Keycloak's enhancement. Efforts to advance the support for Token Exchange are underway, and community feedback is invaluable. Please join the discussion on the current usage of Token Exchange to help us out. Keycloak and the Secrets of the Universe at CERN A standout moment was learning about Keycloak's role at CERN in the talk "The Hard Life of Securing a Particle Accelerator", as shared by Antonio Nappi and Sebastian Lopienski, emphasizing its contribution to securing the particle accelerator's IAM infrastructure. Keycloak supports research on the nature of the universe. How cool is that :) Keycloak, OpenFGA, and Kubernetes Authorizer Jonathan Whitaker's talk "Federated IAM for Kubernetes with OpenFGA" on federated IAM with OpenFGA showcased innovative approaches for managing access to Kubernetes resources through the combination of Keycloak, OpenFGA and a custom Kubernetes Authorizer Web Hook. In particular, the demonstration of temporarily elevated access to Kubernetes resources was very well received. Keycloak: The Leading Edge of AuthN and AuthZ Last but not least, our session, "The Leading Edge of AuthN and AuthZ by Keycloak", presented by Takashi Norimatsu and Thomas Darimont, introduced the latest Keycloak advancements, including support for Passkeys, OAuth 2.1, and OpenID for Verifiable Credentials (OpenID4VC). As part of our talk, we showed the current support for Passkeys and some integration options with ## Chainguard Terraform Provider is now available DevFeed: [Chainguard Terraform Provider is now available]() Original publisher: [Read original article]() Published: 2024-01-31T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Terraform](), [Infrastructure as code](), [chainguard](), [DevOps](), [OAuth 2.0](), [Security](), [chainguard images](), [Amazon Web Services]() Tags: [api](), [authentication](), [aws](), [blog](), [chainguard](), [chainguard-images](), [devops](), [github](), [gitlab](), [google](), [iac](), [oauth2](), [security](), [terraform](), [terraform-provider]() ### AI overview Chainguard announces a Terraform Provider for declaratively managing resources on the Chainguard Platform, including identities, role bindings, custom roles, and other resources. The article explains Terraform providers, authentication through OAuth2 with GitHub, GitLab, or Google, and support for assumable identities. ### Source excerpt Introducing the Chaingaurd Terraform Provider: Streamline your DevOps with secure, automated resource management for improved security. ## SAML Protocol DevFeed: [SAML Protocol]() Original publisher: [Read original article]() Author: Keith Richards Published: 2023-11-29T17:55:03Z Content type: article Language: en Sources: [Clever]() Topics: [saml](), [Single sign-on (SSO)](), [Authentication](), [Authorization](), [Security]() Tags: [authentication](), [authorization](), [oauth2](), [protocol](), [saml](), [security](), [sso](), [standard](), [third-party-applications]() ### AI overview This article explains SAML as an open standard for exchanging authentication and authorization data between parties. It describes SAML's role in single sign-on, its history through SAML 2.0, and the roles of service providers and identity providers. ### Source excerpt A tool for Identity Federation Security Assertion Markup Language, or SAML, is an open standard for exchanging authentication and authorization data between two parties. It's a common strategy for single sign-on (SSO), allowing users to sign in once and authenticate with multiple third party applications. Similar to OAuth2.0, SAML promotes data security by preventing direct [...] The post SAML Protocol appeared first on Clever Engineering Blog. ## GitHub OAuth in your Python Flask app DevFeed: [GitHub OAuth in your Python Flask app]() Original publisher: [Read original article]() Author: Andrew Smith Published: 2023-11-21T07:00:00Z Content type: tutorial Language: en Sources: [Supabase Blog]() Topics: [Flask](), [OAuth](), [OAuth 2.0](), [Supabase](), [Authentication](), [web applications](), [airflow](), [CadQuery]() Tags: [authentication](), [callback](), [flask](), [github](), [guide](), [integration](), [jwt](), [oauth](), [oauth2](), [python](), [web-app]() ### AI overview A step-by-step guide to adding GitHub OAuth2 login to a Python Flask web app using Supabase. It covers installing the library, configuring session storage for JWTs, initializing the Supabase client, creating sign-in and callback routes, and exchanging the authorization code for a session. ### Source excerpt A step-by-step guide on building Login with GitHub into your Python apps. ## Supabase Beta August 2023 DevFeed: [Supabase Beta August 2023]() Original publisher: [Read original article]() Author: Ant Wilson Published: 2023-09-08T07:00:00Z Content type: article Language: en Sources: [Supabase Blog]() Topics: [Supabase](), [Embeddings](), [hugging face](), [Command-line interface](), [Python](), [OAuth 2.0](), [observability](), [Vercel](), [Elixir](), [Multi-tenancy](), [Next.js](), [Latency]() Tags: [cli](), [elixir](), [embeddings](), [hugging-face](), [integration](), [latency](), [multi-tenancy](), [next-js](), [oauth2](), [observability](), [open-source](), [python](), [recap](), [update](), [vercel](), [web-applications]() ### AI overview Supabase reviews the products and features shipped during Launch Week 8, including faster vector search with pgvector 0.5.0 and HNSW indexes, Hugging Face support, local development upgrades, Supabase branching, Studio 3.0, OAuth2 applications, Vercel Integration 2.0 with Next.js App Router support, and Supavisor for scaling Postgres connections. It also highlights community activity, HIPAA and SOC2 Type 2 compliance, and hackathon winners. ### Source excerpt Launch Week 8 review and more things we shipped ๐Ÿš€ ## Supabase Integrations Marketplace DevFeed: [Supabase Integrations Marketplace]() Original publisher: [Read original article]() Author: Thor Schaeff Published: 2023-08-10T07:00:00Z Content type: article Language: en Sources: [Supabase Blog]() Topics: [Supabase](), [OAuth 2.0](), [Databases](), [Open Source](), [Workers](), [Low code](), [Next.js]() Tags: [api](), [caching](), [database](), [integrations](), [next-js](), [oauth](), [oauth2](), [open-source](), [secrets](), [typescript](), [workers]() ### AI overview Supabase announces its Integrations Marketplace, now offering more than 60 integrations and OAuth 2.0 applications. The article highlights partner integrations that connect Supabase projects with Cloudflare Workers, Resend, Snaplet, and Trigger.dev for database access, email delivery, data handling, and background jobs. ### Source excerpt Become a Supabase Integrations Partner: Publish OAuth Apps and Build with Supabase. ## OpenID Connect DevFeed: [OpenID Connect]() Original publisher: [Read original article]() Author: Keith Richards Published: 2023-07-18T19:59:50Z Content type: tutorial Language: en Sources: [Clever]() Topics: [OpenID connect (OIDC)](), [Authentication](), [OAuth 2.0](), [Protocol (disambiguation)]() Tags: [auth](), [authentication](), [authorization](), [oauth](), [oauth-2-0](), [oauth2](), [oidc](), [openid](), [openid-connect](), [protocol]() ### AI overview This article explains how OpenID Connect adds user authentication and identity information to OAuth 2.0's authorization framework. It compares the roles of OAuth 2.0 and OIDC, describes OIDC's background, and introduces the relying party and OpenID provider. ### Source excerpt Adding AuthN to OAuth2.0 OpenID Connect (OIDC) is an authentication protocol that sits on top of the OAuth2.0 protocol. It provides a standardized way for clients to authenticate users and obtain information about their identity. In simple terms, OpenID Connect allows users to log in to different applications using a single set of credentials. It [...] The post OpenID Connect appeared first on Clever Engineering Blog. [Next page]()