What's the best way to do authentication in modern applications

neciudan.dev

cross-posted to:
webdev@programming.dev

What's the best way to do authentication in modern applications

neciudan.dev

RSS Bot@lemmy.bestiver.seMB to Hacker News@lemmy.bestiver.seEnglish · 2 months ago

cross-posted to:
webdev@programming.dev

Where should your auth token live so an XSS bug can't steal it? Here's how to build auth that survives the crazy non-secure world we live in.

Comments

You must log in or # to comment.

Chat

Hacker News@lemmy.bestiver.se

hackernews@lemmy.bestiver.se

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !hackernews@lemmy.bestiver.se

Community locked: only moderators can create posts. You can still comment on posts.

Posts from the RSS Feed of HackerNews.

The feed sometimes contains ads and posts that have been removed by the mod team at HN.

Source of the RSS Bot

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

117 users / day
1.44K users / week
3.71K users / month
9.55K users / 6 months
11 local subscribers
5.37K subscribers
19.1K Posts
13.1K Comments
Modlog