security

Integrating Passkeys with Spring Authorization Server, Spring Cloud Gateway, and React

Passkeys are a modern replacement for passwords that offer a safer and easier login experience. You authenticate using the same biometrics or PIN you use to …

• security
• passkeys

Securing Your Web Apps: Spring Security OAuth 2.0 + BFF Pattern

In this blog post I will give you an example of how to implement OAuth 2.0 backend including BFF (Backend For Frontend) for browser-based applications using …

• security
• spring
• oauth2

Six Degrees of Separation Theory

Have you ever heard about Six Degrees of Separation theory? This theory states that you’re at most six degrees away from anyone on the planet Earth, all these …

• security
• fun-facts
• crazy-stuff

Authorization Code Flow for Confidential Clients with BFF

Let’s explore how Authorization Code Flow works for Confidential client using BFF (Backend For Frontend).

• oauth2
• security

Authorization Code Flow (PKCE) for Public Clients

Let’s explore how Authorization Code Flow with PKCE (Proof Key For Code Exchange) extension works in OAuth 2.0.

• oauth2
• security

OAuth 2.0 Core Concepts

Resource Owner – The user who owns the data and grants access.

• oauth2
• security