Mastodon.world admins @mwadmin

HabrКрасиво инжектим JwtAuthenticationToken в Spring Boot юнит тестыКак часто вам приходится тестировать аутентификацию в ваших юнит тестах Spring Boot приложений? Мне довольно часто. И сейчас расскажу о своем кейсе, где я сделал эту работу удобней.<a href="https://habr.com/ru/articles/931476/" rel="nofollow noopener" translate="no" target="_blank">https://habr.com/ru/articles/931476/</a><a href="https://zhub.link/tags/spring_framework" class="mention hashtag" rel="nofollow noopener" target="_blank">#spring_framework</a> <a href="https://zhub.link/tags/spring_boot" class="mention hashtag" rel="nofollow noopener" target="_blank">#spring_boot</a> <a href="https://zhub.link/tags/spring_security" class="mention hashtag" rel="nofollow noopener" target="_blank">#spring_security</a> <a href="https://zhub.link/tags/oauth2" class="mention hashtag" rel="nofollow noopener" target="_blank">#oauth2</a> <a href="https://zhub.link/tags/junit" class="mention hashtag" rel="nofollow noopener" target="_blank">#junit</a>

Tao of MacOpen ID ConnectOpenID Connect (OIDC) is an authentication protocol built on top of the OAuth 2.0 framework. It allows clients to verify the identity of end-users based on the authentication perfo(...)<a href="https://mastodon.social/tags/authentication" class="mention hashtag" rel="nofollow noopener" target="_blank">#authentication</a> <a href="https://mastodon.social/tags/identitymanagement" class="mention hashtag" rel="nofollow noopener" target="_blank">#identitymanagement</a> <a href="https://mastodon.social/tags/oauth2" class="mention hashtag" rel="nofollow noopener" target="_blank">#oauth2</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://mastodon.social/tags/sso" class="mention hashtag" rel="nofollow noopener" target="_blank">#sso</a><a href="https://taoofmac.com/space/protocols/oidc" rel="nofollow noopener" translate="no" target="_blank">https://taoofmac.com/space/protocols/oidc</a>

Axel NennkerIETF123 is fast approaching <a href="https://mastodon.social/tags/oauth2" class="mention hashtag" rel="nofollow noopener" target="_blank">#oauth2</a> <a href="https://mastodon.social/tags/openid" class="mention hashtag" rel="nofollow noopener" target="_blank">#openid</a> <a href="https://mastodon.online/@ietf" class="u-url mention" rel="nofollow noopener" target="_blank">@ietf</a>

credativ GmbHMit PostgreSQL 18 wurde eine spannende neue Funktion eingeführt: Native Unterstützung für OAuth2. Wie funktioniert das jetzt nun?Mehr Informationen findet ihr unter: <a href="https://www.credativ.de/blog/credativ-inside/postgresql-18-trifft-oauth2-so-funktioniert-die-native-unterstuetzung-mit-keycloak/" rel="nofollow noopener" translate="no" target="_blank">https://www.credativ.de/blog/credativ-inside/postgresql-18-trifft-oauth2-so-funktioniert-die-native-unterstuetzung-mit-keycloak/</a><a href="https://mastodon.social/tags/credativ" class="mention hashtag" rel="nofollow noopener" target="_blank">#credativ</a> <a href="https://mastodon.social/tags/postgresql" class="mention hashtag" rel="nofollow noopener" target="_blank">#postgresql</a> <a href="https://mastodon.social/tags/keycloak" class="mention hashtag" rel="nofollow noopener" target="_blank">#keycloak</a> <a href="https://mastodon.social/tags/oauth2" class="mention hashtag" rel="nofollow noopener" target="_blank">#oauth2</a> <a href="https://mastodon.social/tags/opensource" class="mention hashtag" rel="nofollow noopener" target="_blank">#opensource</a>

Kyler MiddletonThe next article in the Vera Teams series is now out! PHEWThis one covers all the magic I'm doing to make a stateless app (lambda) stateful using dynamoDB, and how Entra works to get an auth_code from the IdP, and exchange it for a token. Lots of cool Entra things there, as well as stateless architecture. It's REAL cool, check it out: <a href="https://www.letsdodevops.com/p/teamsai-4" rel="nofollow noopener" translate="no" target="_blank">https://www.letsdodevops.com/p/teamsai-4</a> <a href="https://infosec.exchange/tags/LetsDoDevOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#LetsDoDevOps</a> <a href="https://infosec.exchange/tags/Lambda" class="mention hashtag" rel="nofollow noopener" target="_blank">#Lambda</a> <a href="https://infosec.exchange/tags/AIEngineering" class="mention hashtag" rel="nofollow noopener" target="_blank">#AIEngineering</a> <a href="https://infosec.exchange/tags/EntraIdP" class="mention hashtag" rel="nofollow noopener" target="_blank">#EntraIdP</a> <a href="https://infosec.exchange/tags/OAuth2" class="mention hashtag" rel="nofollow noopener" target="_blank">#OAuth2</a>

|7eter l-|. l3oling 🧰I need to feed my family, so please consider supporting my open source work. The various OAuth libraries are often buried deep inside dependency trees, so aren't top of mind, but they are a great deal of work to maintain. <a href="https://ruby.social/tags/Ruby" class="mention hashtag" rel="nofollow noopener" target="_blank">#Ruby</a> <a href="https://ruby.social/tags/FLOSS" class="mention hashtag" rel="nofollow noopener" target="_blank">#FLOSS</a> <a href="https://ruby.social/tags/oauth2" class="mention hashtag" rel="nofollow noopener" target="_blank">#oauth2</a> <a href="https://ruby.social/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> :ruby: 🔒 <a href="https://opencollective.com/ruby-oauth/updates/oauth2-recent-releases" rel="nofollow noopener" translate="no" target="_blank">https://opencollective.com/ruby-oauth/updates/oauth2-recent-releases</a>

DiazCarreteoauth2 is a nightmare from which I'm trying to awaken.<a href="https://hachyderm.io/tags/oauth2" class="mention hashtag" rel="nofollow noopener" target="_blank">#oauth2</a>

HabrКак в Django реализовать заполнение профиля пользователя через GoogleЭта статья продолжает пост , в котором был рассмотрен один из алгоритмов аутентификации пользователя через платформу Google. Сейчас мы дополним ее механизмом заполнения профиля пользователя данными из Google-аккаунта. Хотелось бы подчеркнуть, что в обеих статьях рассматривается только один из алгоритмов. Он, на мой взгляд, наиболее понятен для начинающих разработчиков, хотя существуют и другие способы. О них можно узнать из документации Django. Проведя аутентификацию через Google, мы получили только стандартные данные - идентификатор и имя пользователя. Но можно получить и другие, в частности, email, возраст, информацию о себе и т.д. Реализуем в проекте собственный сервис ( pipeline ) и добавим в пакет приложения authapp соответствующий модуль ( pipeline.py ):<a href="https://habr.com/ru/articles/923360/" rel="nofollow noopener" translate="no" target="_blank">https://habr.com/ru/articles/923360/</a><a href="https://zhub.link/tags/%D0%B0%D1%83%D1%82%D0%B5%D0%BD%D1%82%D0%B8%D1%84%D0%B8%D0%BA%D0%B0%D1%86%D0%B8%D1%8F_%D0%BF%D0%BE%D0%BB%D1%8C%D0%B7%D0%BE%D0%B2%D0%B0%D1%82%D0%B5%D0%BB%D0%B5%D0%B9" class="mention hashtag" rel="nofollow noopener" target="_blank">#аутентификация_пользователей</a> <a href="https://zhub.link/tags/django" class="mention hashtag" rel="nofollow noopener" target="_blank">#django</a> <a href="https://zhub.link/tags/google" class="mention hashtag" rel="nofollow noopener" target="_blank">#google</a> <a href="https://zhub.link/tags/python" class="mention hashtag" rel="nofollow noopener" target="_blank">#python</a> <a href="https://zhub.link/tags/oauth2" class="mention hashtag" rel="nofollow noopener" target="_blank">#oauth2</a>

EmilyMoved away from EMQX for my home lab as they moved to a new licensing scheme and dropped features on the community version to <a href="https://hackaday.social/tags/RabbitMQ" class="mention hashtag" rel="nofollow noopener" target="_blank">#RabbitMQ</a> 4.1.1. After a day of working on it, got <a href="https://hackaday.social/tags/oauth2" class="mention hashtag" rel="nofollow noopener" target="_blank">#oauth2</a> into the cluster working, and <a href="https://hackaday.social/tags/ldap" class="mention hashtag" rel="nofollow noopener" target="_blank">#ldap</a> backed <a href="https://hackaday.social/tags/mqtt" class="mention hashtag" rel="nofollow noopener" target="_blank">#mqtt</a> client logins. Not as flashy as EMQX, but fitting my needs so far very well.Really wanted unified account management and doing it all through <a href="https://hackaday.social/tags/Authentik" class="mention hashtag" rel="nofollow noopener" target="_blank">#Authentik</a> through oauth2 and it's LDAP outpost is very cool. No more local mqtt accounts 😊 <a href="https://hackaday.social/tags/Homelab" class="mention hashtag" rel="nofollow noopener" target="_blank">#Homelab</a> <a href="https://hackaday.social/tags/selfhosted" class="mention hashtag" rel="nofollow noopener" target="_blank">#selfhosted</a>

Sébastien Stormacq🔐 API keys or client credentials?We unpack OAuth 2.0, token security, and the future of AI agents in M2M auth with Cognito and API Gateway. 🎙️New AWS Developers Podcast out now! 🎧 (links in the thread)<a href="https://mastodon.social/tags/AWS" class="mention hashtag" rel="nofollow noopener" target="_blank">#AWS</a> <a href="https://mastodon.social/tags/OAuth2" class="mention hashtag" rel="nofollow noopener" target="_blank">#OAuth2</a> <a href="https://mastodon.social/tags/Cognito" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cognito</a>

OpenHistoricalMapDo you already contribute to <a href="https://en.osm.town/@openstreetmap" class="u-url mention" rel="nofollow noopener" target="_blank">@openstreetmap</a>? You can start contributing to OpenHistoricalMap too in just a few clicks, without having to juggle yet another password for yet another mapping site. Once you have a taste of OSM <a href="https://mapstodon.space/tags/SingleSignOn" class="mention hashtag" rel="nofollow noopener" target="_blank">#SingleSignOn</a> via <a href="https://mapstodon.space/tags/OAuth2" class="mention hashtag" rel="nofollow noopener" target="_blank">#OAuth2</a>, you’ll never look back.

Sven Jacobs :androidHead:Today I released the first version of <a href="https://androiddev.social/tags/Lokksmith" class="mention hashtag" rel="nofollow noopener" target="_blank">#Lokksmith</a>, a <a href="https://androiddev.social/tags/KotlinMultiplatform" class="mention hashtag" rel="nofollow noopener" target="_blank">#KotlinMultiplatform</a> OpenID Connect client library for <a href="https://androiddev.social/tags/Android" class="mention hashtag" rel="nofollow noopener" target="_blank">#Android</a> and <a href="https://androiddev.social/tags/iOS" class="mention hashtag" rel="nofollow noopener" target="_blank">#iOS</a>. I've been working on this in my spare time for the past few weeks. I finally reached a state that I can proudly show to the world.The first release contains a fully working implementation for Android. The iOS integration is not yet available. Any help regarding iOS is greatly appreciated. <a href="https://lokksmith.dev" rel="nofollow noopener" translate="no" target="_blank">https://lokksmith.dev</a><a href="https://androiddev.social/tags/Kotlin" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kotlin</a> <a href="https://androiddev.social/tags/OpenID" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenID</a> <a href="https://androiddev.social/tags/OpenIDConnect" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenIDConnect</a> <a href="https://androiddev.social/tags/OIDC" class="mention hashtag" rel="nofollow noopener" target="_blank">#OIDC</a> <a href="https://androiddev.social/tags/OAuth" class="mention hashtag" rel="nofollow noopener" target="_blank">#OAuth</a> <a href="https://androiddev.social/tags/OAuth2" class="mention hashtag" rel="nofollow noopener" target="_blank">#OAuth2</a>

HabrВведение в OAuth и OpenID ConnectИдентификация — это заявление о том, кем вы являетесь. В зависимости от ситуации, это может быть имя, адрес электронной почты, номер учетной записи, и так далее. Аутентификация — предоставление доказательств, что вы на самом деле есть тот, кем идентифицировались (от слова “authentic” - истинный, подлинный). В качестве доказательства может использоваться паспорт, для подтверждения личности в банке, либо ввод пароля на сайте. Авторизация — проверка, что вам разрешен доступ к запрашиваемому ресурсу.<a href="https://habr.com/ru/articles/916640/" rel="nofollow noopener" translate="no" target="_blank">https://habr.com/ru/articles/916640/</a><a href="https://zhub.link/tags/oauth2" class="mention hashtag" rel="nofollow noopener" target="_blank">#oauth2</a> <a href="https://zhub.link/tags/openidconnect" class="mention hashtag" rel="nofollow noopener" target="_blank">#openidconnect</a> <a href="https://zhub.link/tags/%D0%B0%D0%B2%D1%82%D0%BE%D1%80%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D1%8F" class="mention hashtag" rel="nofollow noopener" target="_blank">#авторизация</a> <a href="https://zhub.link/tags/%D0%B0%D1%83%D1%82%D0%B5%D0%BD%D1%82%D0%B8%D1%84%D0%B8%D0%BA%D0%B0%D1%86%D0%B8%D1%8F" class="mention hashtag" rel="nofollow noopener" target="_blank">#аутентификация</a>

Sérgio IsidoroIt's 2025, and Google <a href="https://masto.pt/tags/oauth2" class="mention hashtag" rel="nofollow noopener" target="_blank">#oauth2</a> still hasn't implemented <a href="https://masto.pt/tags/PKCE" class="mention hashtag" rel="nofollow noopener" target="_blank">#PKCE</a> code flow without client secret for web SPAs<a href="https://stackoverflow.com/questions/60724690/using-google-oidc-with-code-flow-and-pkce" rel="nofollow noopener" translate="no" target="_blank">https://stackoverflow.com/questions/60724690/using-google-oidc-with-code-flow-and-pkce</a>

|7eter l-|. l3oling 🧰:ruby: Let's support kids.By "kids", I of course mean support for Key IDs (kids) in JWT assertions (IETF rfc7515 JSON Web Signature - JWS compliant)Of course, I also mean <a href="https://ruby.social/tags/FreePalestine" class="mention hashtag" rel="nofollow noopener" target="_blank">#FreePalestine</a>, and <a href="https://ruby.social/tags/SayNoToGenocide" class="mention hashtag" rel="nofollow noopener" target="_blank">#SayNoToGenocide</a>For a full writeup:<a href="https://dev.to/galtzo/ann-oauth2-v2012-w-support-for-kids-57be" rel="nofollow noopener" translate="no" target="_blank">https://dev.to/galtzo/ann-oauth2-v2012-w-support-for-kids-57be</a><a href="https://ruby.social/tags/Ruby" class="mention hashtag" rel="nofollow noopener" target="_blank">#Ruby</a> <a href="https://ruby.social/tags/JWT" class="mention hashtag" rel="nofollow noopener" target="_blank">#JWT</a> <a href="https://ruby.social/tags/Oauth2" class="mention hashtag" rel="nofollow noopener" target="_blank">#Oauth2</a>

Vladimir MarinkovicBlogged: kickstarter guide for using Keycloak as identity provider<a href="https://cleverheap.com/posts/keycloak-with-aspnet-webapi/" rel="nofollow noopener" translate="no" target="_blank">https://cleverheap.com/posts/keycloak-with-aspnet-webapi/</a><a href="https://mastodon.social/tags/keycloak" class="mention hashtag" rel="nofollow noopener" target="_blank">#keycloak</a> <a href="https://mastodon.social/tags/blog" class="mention hashtag" rel="nofollow noopener" target="_blank">#blog</a> <a href="https://mastodon.social/tags/dotnet" class="mention hashtag" rel="nofollow noopener" target="_blank">#dotnet</a> <a href="https://mastodon.social/tags/aspnet" class="mention hashtag" rel="nofollow noopener" target="_blank">#aspnet</a> <a href="https://mastodon.social/tags/oidc" class="mention hashtag" rel="nofollow noopener" target="_blank">#oidc</a> <a href="https://mastodon.social/tags/oauth2" class="mention hashtag" rel="nofollow noopener" target="_blank">#oauth2</a>

damienbodBlogged: Implement client assertions with client credentials flow using OAuth DPoP<a href="https://damienbod.com/2025/05/12/implement-client-assertions-with-client-credentials-flow-using-oauth-dpop/" rel="nofollow noopener" translate="no" target="_blank">https://damienbod.com/2025/05/12/implement-client-assertions-with-client-credentials-flow-using-oauth-dpop/</a><a href="https://mastodon.social/tags/oauth" class="mention hashtag" rel="nofollow noopener" target="_blank">#oauth</a> <a href="https://mastodon.social/tags/aspnetcore" class="mention hashtag" rel="nofollow noopener" target="_blank">#aspnetcore</a> <a href="https://mastodon.social/tags/dotnet" class="mention hashtag" rel="nofollow noopener" target="_blank">#dotnet</a> <a href="https://mastodon.social/tags/dpop" class="mention hashtag" rel="nofollow noopener" target="_blank">#dpop</a> <a href="https://mastodon.social/tags/duende" class="mention hashtag" rel="nofollow noopener" target="_blank">#duende</a> <a href="https://mastodon.social/tags/identity" class="mention hashtag" rel="nofollow noopener" target="_blank">#identity</a> <a href="https://mastodon.social/tags/oauth2" class="mention hashtag" rel="nofollow noopener" target="_blank">#oauth2</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a>

Habr[Перевод] Как обезопасить Spring AI MCP сервер с помощью OAuth2Команда Spring АйО перевела статью о том, как правильно настраивать безопасность на MCP серверах с использованием возможностей OAuth2 в свете новейшей спецификации MCP, вышедшей в свет 26-го марта 2025-го года, то есть совсем недавно.<a href="https://habr.com/ru/companies/spring_aio/articles/901360/" rel="nofollow noopener" translate="no" target="_blank">https://habr.com/ru/companies/spring_aio/articles/901360/</a><a href="https://zhub.link/tags/mcp_server" class="mention hashtag" rel="nofollow noopener" target="_blank">#mcp_server</a> <a href="https://zhub.link/tags/oauth2" class="mention hashtag" rel="nofollow noopener" target="_blank">#oauth2</a> <a href="https://zhub.link/tags/java" class="mention hashtag" rel="nofollow noopener" target="_blank">#java</a> <a href="https://zhub.link/tags/kotlin" class="mention hashtag" rel="nofollow noopener" target="_blank">#kotlin</a> <a href="https://zhub.link/tags/spring" class="mention hashtag" rel="nofollow noopener" target="_blank">#spring</a> <a href="https://zhub.link/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a>