Links tagged “authentication”

words.filippo.io

Opaque, Interoperable Passkey Records (and a Go API) - Filippo Valsorda proposes a portable format for passkeys, with a working Go implementation.

camil.org

Step-by-step guide to deploying a highly available Kubernetes cluster on AWS with kube-aws, including the resulting architecture and optional security add-ons such as Dex.

b-list.org

Why usernames are harder than a unique column — case folding, Unicode normalisation, homograph attacks, reserved names, and the tripartite identity pattern.

django-guardian.readthedocs.io

Documentation for django-guardian, an extra authentication backend adding per-object permissions to Django.

github.com

Beginners guide to python-social-auth, gathering its core concepts — backends, pipeline, storage — and showing how they fit together inside an application.

python-oauth2.readthedocs.io

Documentation for python-oauth2, a framework for providing OAuth 2.0 authentication in Python applications.

developers.google.com

Google's reference on using OAuth 2.0 to authorise access to its APIs, with the flows for web, installed, server-side and limited-input applications.

blog.codinghorror.com

A rundown of what an ideal login dialog does — email-based login, clear feedback, password-manager support, caps-lock detection and rate limiting.