75,623 questions
1 vote
1 answer
36 views
Why are authentication cookies not flowing from Blazor web assembly to SignalR?
I'm building a matchmaking service for a browser gaming platform using Blazor web assembly, Microsoft Entra external id and SignalR. To connect clients to the matchmaking service, I have created an ...
0 votes
0 answers
33 views
AKA-V1 & IPSec Support in android application
For Mobile telephony based application, we are trying to authenticate via AKA-V1 using SIM information, we do have our own control over GSI Android which enable us to provide permission required for ...
0 votes
0 answers
52 views
Next.js session object on client doesn't include custom role property
I'm trying to protect the client side in my Next.js app using a custom session with better-auth, but the role property not appear inside the session object , but when I display session.user.role` it ...
-3 votes
0 answers
90 views
Would this be enough for SQL DATABASE [closed]
’m building a basic SQL database application in C# using ASP.NET Core, Entity Framework Core, SQLite, and Identity. Below are my notes and steps exactly as I’ve written them. I want to know if this ...
Tooling
0 votes
5 replies
36 views
Google Oauth in react native
How can I use Google OAuth in an Expo Go app, and how does it work once the app is published on the Play Store? Currently, in Expo Go, the app is treated like a web application, so it uses a Web ...
6 votes
0 answers
56 views
How to authenticate with GridDB Cloud REST API using API key vs Basic Auth?
I'm trying to query data from GridDB Cloud using its REST/WebAPI endpoint. The official docs mention both Basic Authentication and API key-based access, but I'm unclear on the exact header format and ...
0 votes
0 answers
30 views
Cookie is not created in Blazor Server App
I'm working on a Blazor Server App which has to authenticate via LDAP (it works), and set a cookie so that the user must authenticate only e.g. once a week. I have created a minimalAPI in the program....
Advice
0 votes
4 replies
86 views
Architecture for handling OAuth token refresh across multiple services in agent-based systems
I’m currently working on a system where agents interact with multiple external services such as Google APIs, Slack, and GitHub. All of these services use OAuth, which means access tokens expire ...
Best practices
0 votes
6 replies
103 views
Which authentication approaches are suited with .NET MAUI Blazor Hybrid and Web App without SSR?
.NET MAUI Blazor Hybrid and Web App is the project template of the cross-platform applications available in Visual Studio: Actually, it is the set of 4 projects (details): It has been documented how ...
Best practices
2 votes
2 replies
120 views
What's the best approach for implementing user context in Express.js?
I'm building a Node.js/Express API and need to implement a user context system that allows me to access the authenticated user from anywhere in my application (services, utilities, etc.). The Problem: ...
0 votes
0 answers
46 views
How can I reduce the response URL size from Microsoft sign in via the Authentication.MicrosoftAccount library?
We use Duende Identity Server (7.4.4) to enable sign in on our site. We offer a general Microsoft Single Sign On button through the Microsoft.AspNetCore.Authentication.MicrosoftAccount Nuget package. ...
Advice
3 votes
1 replies
113 views
AIoT device: Radius Authentication using PHP with Message-Authenticator attribute
We have some AIoT devices and want to authenticate with RADIUS using PHP. The new RADIUS Server ask for the Message-Authenticator attribute and the build-in RADIUS functions of PHP can not do it. <?...
Best practices
2 votes
1 replies
96 views
DDD approach for user authentication and registration
I’m using a DDD approach in my application. I want to learn best practices for writing DDD code the way Big Tech companies and experienced developers do it. So, I have a User entity with the following ...
Advice
1 vote
0 replies
47 views
How to implement role-based access control in a multi-tenant SaaS application?
I’m working on a multi-tenant SaaS application where different organizations can create and manage business plans and financial forecasts. Each organization has multiple users with different roles (e....
Advice
0 votes
0 replies
36 views
Framework-agnostic strategies for silently flagging fake accounts (Sybil attacks)
I am designing the core logic for a user registration flow, and my main concern is mitigating Sybil attacks (mass creation of fake accounts). My goal is NOT to block these users during registration. ...