GitHub - hashicorp/cap: A collection of authentication Go packages related to OIDC, JWKs, Distributed Claims, LDAPYou signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
GitHub - authelia/authelia: The Single Sign-On Multi-Factor portal for web apps
Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on (SSO) for your applications via a web portal. It acts as a companion for reverse proxies by allowing, denying, or redirecting requests. Documentation is available at https://www.authelia.com/. The following is a simple diagram of the architecture: Authelia can be installed as a
Magic: Future-proof passwordless authentication
By clicking Mint, you agree to receive marketing-related electronic communications from Magic Labs, Inc.
君達の資格情報は全ていただいた！
本記事は、 2019 年 10 月 3 日に Azure Active Directory Identity Blog に公開された記事 (All your creds are belong to us!) を翻訳したものです。原文は こちら より参照ください。 先日ですが、お客様がアカウント乗っ取り (ATO) の標的となり、我々のチームが支援したということがありました。SMS と Authenticator アプリを使用して 2 段階認証を必須にしてアカウントを保護していたにも関わらず、攻撃者はアカウントに侵入し、パスワードが変更されていました。 MFA は破られてしまったのです。 前回のブログでは、パスワードで攻撃は防げない こと、多要素認証 (MFA) であれば攻撃を防げることを解説しました。ただ、何人かの方が「MFA は万能薬ではない」とコメントくださりました。標的型攻撃など攻撃
Git Credential Manager Core: Building a universal authentication experience
SecurityGit Credential Manager Core: Building a universal authentication experienceAuthentication is a critical component to your daily development. When working in open source, you need to prove that you have rights to update a branch with git push. Additionally… Authentication is a critical component to your daily development. When working in open source, you need to prove that you have rights t
HTML attributes to improve your users' two factor authentication experience
There are plenty of opportunities for friction in the user experience when logging in, particularly while entering a two factor authentication code. As developers we should be building applications that support the need for account security but don't detract from the user experience. Sometimes it can feel as though these requirements are in a battle against each other. In this post we will look at
Is SMS 2FA Secure?
An Empirical Study of Wireless Carrier Authentication for SIM Swaps Presented at SOUPS 2020 We examined the authentication procedures used by five prepaid wireless carriers when a customer attempts to change their SIM card, or SIM swap. We found that all five carriers use insecure authentication challenges that can easily be subverted by attackers. We reverse-engineered the authentication policies
freeOTP - an open source solution for authentication soft tokens - Fedora Magazine
freeOTP — an open source solution for authentication soft tokens freeOTP is a soft token authenticator that can be used for two-factor authentication, and is available as a free Android app or iOS app. Two-factor authentication — requiring a user to have “something you have”, as well as “something you know” i.e. a password — is being supported on many more services these days. Popular ways to imp
【iOS 11】 Web認証用の新クラス「SFAuthenticationSession」
こんにちは、アプリケーション共同開発部の中澤です。 先日、「iOS 11 で Safari View Controller の Cookie 等の共有機能が無くなる (予定)」という記事で、 Safari View Controller の仕様変更について「不便になるなぁ」などとボヤいておりましたが、あれから少し後、 SafariServices フレームワークに新しく SFAuthenticationSession というクラスが追加されました。これを使うことで、 Safari View Controller の当初の利便性をある程度保って Web 認証が出来るようになりました。🎉 以下、その詳細についてご紹介します。 SFAuthenticationSession とは？ SFAuthenticationSession は対象の Web サービスの API トークン を取得するための
Passport.js
passport.authenticate('facebook');('google');('apple');('microsoft');('twitter');('linkedin');('github');('openid'); Passport is authentication middleware for Node.js. Extremely flexible and modular, Passport can be unobtrusively dropped in to any Express-based web application. A comprehensive set of strategies support authentication using a username and password, Facebook, Twitter, and more.
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
認証しないWeb認証 限定公開URLのセキュリティについて考える 公開版
GitHub - git-ecosystem/git-credential-manager: Secure, cross-platform Git credential storage with authentication to GitHub, Azure Repos, and other popular Git hosting services.
GitHub - Swizec/useAuth: The simplest way to add authentication to your React app. Supports various providers.
FIDO認証によるパスワードレスログイン実装入門
YubiHSM 2 Now Qualified for AWS IoT Greengrass Hardware Security Integration | Yubico
Azure Active Directory Authentication (Easy Auth) with Custom Backend Web API
GitHub - rsc/2fa: Two-factor authentication on the command line
Microservices on Fastly