Where Should I Start to Understand APIs and Authentication?
I want to understand APIs at a high level rather than necessarily build them from scratch. I'm trying to learn how different systems connect, how data is requested…
OAuth
What’s the best way to understand APIs, data flow, and authentication?
I'm trying to learn how APIs work at a high level. I want to understand how systems connect, how data is sent and populated, what kinds of information…
Does the Gmail app for iOS support modern authentication with Microsoft 365?
I'm trying to help a user access a Microsoft 365 work or school mailbox through the Gmail app on an iPhone. Selecting the Office 365 account type takes…
What’s the standard way to authenticate an iframe using the parent page’s OAuth session?
I'm developing info.client.com, which is hosted on the client's Apache server. The client's main site, www.client.com, is hosted by a third-party service and embeds info.client.com in an iframe.…
What’s the standard way to share an OAuth session with an embedded iframe?
I'm developing info.client.com, which needs to be embedded in an iframe on www.client.com. The main site is hosted by a third-party platform, while the embedded site runs on…
What’s the simplest safe way to restrict a small internal tool to six users?
I built a small on-call tracker for my team in a few hours. The tracker itself was easy, but figuring out how to let exactly six people use…
What’s the simplest secure way to restrict a small internal tool to six users?
I built a small on-call tracker for my team in a few hours, but then spent most of the day trying to restrict access to six specific people.…
Does Supporting Multiple Login Methods Create a Confusing User Experience?
Authentication methods have generally become more secure and convenient. Passkeys, bank identity providers, and sign-in options from major platforms can all be easier than managing passwords on their…
How should sensitive actions be confirmed for users authenticated through SSO?
I'm adding Google-based SSO to an existing application where sensitive actions currently require the user to re-enter their password, such as changing security settings or performing destructive operations.…
Why did my PowerShell request to the Reddit API suddenly stop working?
I have a PowerShell script that has worked for a long time and retrieves the last 100 comments from a user through an API URL such as `https://api.reddit.com/user/spez.json?limit=100&after=`.…
What are you using for authentication, authorization, and payments?
I've had several side-project ideas over the years but haven't launched one because I'm not very experienced with social login and account management, backend permissions, or secure payment…
What does it cost to add Google and Apple sign-in with self-hosted Better Auth?
I'm using Better Auth for email registration, but I'd like to make sign-up and login easier by adding one-click Google and Apple sign-in. Is Apple's developer membership, which…
What self-hosted OAuth solution works well with SolidJS and Astro?
I'm updating an older project built with SolidJS and AstroJS and need to replace its OAuth setup. I only need login through providers such as Discord and Reddit,…
What does it cost to self-host Google and Apple sign-in with Better Auth?
I'm using Better Auth for email registration, but I'd like to add one-click sign-in with Google and Apple to make registration and login easier. For Apple, do I…
Is It Safe to Include Access Tokens in URL Parameters?
I recently discovered something concerning while my mom was using a website to create and send birthday cards. She generated a link to share a project with a…
How Can I Create a Login and Registration Form for My Website?
I'm building a website using Codex, and I'm a bit lost on how to create a login and registration form. Specifically, I need guidance on where to store…
How do you handle user authentication in your web applications?
User authentication is a crucial part of web development, and I'm interested in the techniques and tools you use for managing it effectively. Do you lean towards established…
Best Way to Connect AWS AgentCore with a Remote SaaS MCP Server?
I'm trying to figure out how to effectively integrate AWS AgentCore with a fully managed remote MCP server provided by a SaaS platform, like Salesforce or Monday. My…
Troubleshooting Microsoft Entra OAuth Issues with Printers
I'm trying to set up OAuth for our Canon IR-Adv printers, and I've run into a bit of a snag. The connection status on the printer says 'Successfully…
Looking for Comprehensive Tutorials on Authentication and Authorization
I'm trying to learn about authentication and authorization, but all I can find are scattered pieces of information, not a comprehensive tutorial. How did you all learn about…