Team IT Security (TSEC) Nachrichtenportal Logo

🕵️ Real-life OIDC Security (IV): Server-Side-Request-Forgery


Nachrichtenbereich: 🕵️ Hacking
🔗 Quelle: security.lauritz-holtmann.de

This is the fourth post of a series on Single Sign-On and OpenID Connect 1.0 security. In this post, SSRF vulnerabilities that were discovered in popular OIDC implementations (Keycloak... [Weiterlesen]

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🔧 Cross-Cloud Authentication in Kubernetes: A Comprehensive Guide to IRSA, Workload Identity, and Federated Identity


📈 532.44 Punkte
🔧 Programmierung

🔧 OpenID Connect Core 1.0 Deep Dive: Understanding the "Authentication" Layer on top of OAuth 2.0


📈 475.96 Punkte
🔧 Programmierung

🔧 Solving Azure Authentication for Crossplane: Three Real-World Scenarios


📈 410.68 Punkte
🔧 Programmierung

🔧 Self-Hosting n8n on AWS ECS Fargate with Terraform, Okta OIDC SSO and a Shared ALB + RDS


📈 364.37 Punkte
🔧 Programmierung

🔧 Auth0 AWS Amplify Gen2: OIDC Authorization for AppSync via Identity Pool Federation


📈 333.43 Punkte
🔧 Programmierung

🔧 End-to-End GitHub Security Hardening Guide for Organizations


📈 330.25 Punkte
🔧 Programmierung

🔧 組織向け GitHub セキュリティ・ハードニング完全ガイド


📈 321.7 Punkte
🔧 Programmierung

🔧 Stop Trusting Every JWT: How I Handle OIDC Claims in My Go Gateway


📈 316.71 Punkte
🔧 Programmierung

🔧 Accessing AWS in Github Actions Using OIDC


📈 277.86 Punkte
🔧 Programmierung

🔧 Auth Strategies: The Right Tool for the Right Scenario


📈 266.09 Punkte
🔧 Programmierung

🔧 Different Ways to Manage AWS IAM to Connect to an EKS Cluster


📈 260.69 Punkte
🔧 Programmierung

🔧 Add Authentication and SSO to Your Shiny App


📈 259.79 Punkte
🔧 Programmierung

🔧 Using OIDC with .NET to connect to MongoDB Atlas


📈 241.71 Punkte
🔧 Programmierung

🔧 Hashicorp Vault CLI Part 7: Authentication


📈 240.81 Punkte
🔧 Programmierung

🔧 Signing Container Images with Cosign


📈 232.45 Punkte
🔧 Programmierung

🔧 Agent2Agent Protocol, IBM Vault, & OAuth 2.0 On-Behalf-Of


📈 232 Punkte
🔧 Programmierung

📰 CODESYS in Festo Automation Suite


📈 227.69 Punkte
📰 IT Security Nachrichten

🔧 Unlocking Seamless & Secure Access: Introducing Generalized OIDC Authentication in Apache DolphinScheduler


📈 216.18 Punkte
🔧 Programmierung

🔧 Picking the Right Auth Protocol: OAuth2, OIDC, or SAML?


📈 214.83 Punkte
🔧 Programmierung

🔧 Sigstore Deep Dive: Unmasking the Magic Behind Keyless Verification


📈 214.38 Punkte
🔧 Programmierung

🔧 More OpenID Federation with pac4j and Connect2id


📈 213.03 Punkte
🔧 Programmierung

🔧 Stop Using AWS Access Keys in GitHub Actions: The OIDC Guide You Need


📈 207.36 Punkte
🔧 Programmierung

🔧 SSO, SAML, OIDC, and SCIM: What Actually Happens When You Click "Sign in with Google"


📈 206.46 Punkte
🔧 Programmierung

🔧 The Twilio-Stytch Acquisition: A Technical Analysis of Developer CIAM in 2025


📈 195.4 Punkte
🔧 Programmierung

🔧 Least-Privilege CI/CD on AWS: The 4-Layer Pattern That Scales to 200 Pipelines


📈 191.09 Punkte
🔧 Programmierung

🔧 Authorization methods in .NET microservices


📈 187.49 Punkte
🔧 Programmierung

🔧 Making OAuth Testable: Rethinking OIDC Clients in JavaScript


📈 186.59 Punkte
🔧 Programmierung

💾 3.0.0-20260331


📈 186.29 Punkte
💾 IT Security Tools

🔧 How to Enable Google OIDC Login in Vault Using Helm and Terraform


📈 185.69 Punkte
🔧 Programmierung

🔧 The 20-Minute Compromise: CI/CD Audit Guide for the TanStack Supply Chain Attack


📈 185.69 Punkte
🔧 Programmierung

🔧 GitHub Actions for HIPAA-compliant deployments


📈 180.93 Punkte
🔧 Programmierung

🔧 Twelve Trust Boundaries: A Field Guide to Supply-Chain Defense After [email protected]


📈 172.12 Punkte
🔧 Programmierung

🔧 Securing Apps: Password Hashing, RBAC, OAuth, and OpenID Connect


📈 164.2 Punkte
🔧 Programmierung

🔧 Add Authentication and SSO to Your Panel App


📈 159.7 Punkte
🔧 Programmierung

🔧 GitHub Organization Security Hardening: Exact Controls and Step-by-Step Setup Guide


📈 159.37 Punkte
🔧 Programmierung