GitHub - openauthjs/openauth: â–¦ Universal, standards-based auth provider.
While there are many open source solutions for auth, almost all of them are libraries that are meant to be embedded into a single application. Centralized auth servers typically are delivered as SaaS services - eg Auth0 or Clerk. OpenAuth instead is a centralized auth server that runs on your own infrastructure and has been designed for ease of self hosting. It can be used to authenticate all of y
OpenAuth
Universal: You can deploy it as a standalone service or embed it into an existing application. It works with any framework or platform. Self-hosted: It runs entirely on your infrastructure and can be deployed on Node.js, Bun, AWS Lambda, or Cloudflare Workers. Standards-based: It implements the OAuth 2.0 spec and is based on web standards. So any OAuth client can use it. Customizable: It comes wit
Ente Auth - Open source 2FA authenticator, with E2EE backups
Ente Auth Open source 2FA authenticator, with end-to-end encrypted backups Setup Auth Secure BackupsAuth provides end-to-end encrypted cloud backups so you don't have to worry about losing your tokens. Our cryptography has been externally audited. Cross platform syncAuth has an app for every platform. Mobile, desktop and web. Your codes sync across all your devices, end-to-end encrypted.
GitHub - hectorm/otpauth: One Time Password (HOTP/TOTP) library for Node.js, Deno, Bun and browsers.
import * as OTPAuth from "otpauth"; // Create a new TOTP object. let totp = new OTPAuth.TOTP({ // Provider or service the account is associated with. issuer: "ACME", // Account identifier. label: "AzureDiamond", // Algorithm used for the HMAC function. algorithm: "SHA1", // Length of the generated tokens. digits: 6, // Interval of time for which a token is valid, in seconds. period: 30, // Arbitra
MFAèªè¨¼ã‚’使ã£ãŸAssumeRoleã§ã‚·ãƒ³ãƒ—ルã«Terraformを実行ã™ã‚‹(aws configure export-credentials) | DevelopersIO
MFAèªè¨¼ã‚’使ã£ãŸAssumeRoleã§ã‚·ãƒ³ãƒ—ルã«Terraformを実行ã™ã‚‹(aws configure export-credentials) Terraform実行時ã®MFAèªè¨¼ã‚’使ã£ãŸAssume Roleを楽ã«ã§ãる方法ãŒãªã„ã‹èª¿ã¹ã¦ã„ãŸã‚‰ã€ä»¥ä¸‹ã®ã‚³ãƒ¡ãƒ³ãƒˆã‚’見ã¤ã‘ã¾ã—ãŸã€‚ Doesn't ask MFA token code when using assume_role with MFA required #2420 ã©ã†ã‚„らツールや長ã„コマンドã®å®Ÿè¡Œãªã—ã§ã€MFAèªè¨¼ã‚ã‚Šã§ã‚‚ç°¡å˜ã«Assume RoleãŒã§ããã†ã§ã™ã€‚ 便利ã ã£ãŸã®ã§ãƒ–ãƒã‚°ã«ã—ã¦ã¿ã¾ã—ãŸã€‚ Terraformã®MFAèªè¨¼äº‹æƒ…ã¯ä»¥ä¸‹ã®ãƒ–ãƒã‚°ã‚’ã”確èªãã ã•ã„。 çµè«– ã“ã®æ–¹æ³•ã§ã¯ã€aws-vaultã‚„aws-mfaãªã©ã®ãƒ„ールã¯ä¸è¦ã§ã™ã€‚ 以下ã®ã‚ˆã†ã«Profileを用æ„ã—ã¦ã€terraformã®ã‚³ãƒžãƒ³ãƒ‰ã‚’打ã¤ã ã‘
Release v1.1.0 · ory/kratos
Ory Kratos v1.1 is the most complete, most scalable, and most secure open-source identity server on the planet, and we are thrilled to announce its release! This release comes with over 270 commits and an incredible amount of new features and capabilities! Don't forget to leave a GitHub star and check out our other open source projects while you're here :) Phone Verification & 2FA with SMS: Enhanc
Amazon Verified Permissions now supports batch authorization
Amazon Verified Permissions now supports batch authorization, allowing you to process up to 30 authorization decisions for a single principal or resource in a single API call. Batch authorization allows you to filter for authorized actions that a given principal can take on a resource. It also enables developers to simplify building applications where a single user action requires multiple actions
GitHub - smallstep/cli: 🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.
Step CLI's command groups illustrate its wide-ranging uses: step certificate: Work with X.509 (TLS/HTTPS) certificates. Create, revoke, validate, lint, and bundle X.509 certificates. Install (and remove) X.509 certificates into your system's (and browser's) trust store. Validate certificate deployment and renewal status for automation Create key pairs (RSA, ECDSA, EdDSA) and certificate signing re
How Discord Rolled Out Yubikeys for All Employees
Have you ever found a user at your company who actually likes using multi-factor authentication (MFA), either time-based one-time passwords (TOTP) or push-based MFA? Either method adds friction for users by necessitating a second device for logins while increasing the cost to attackers. However, both have problems. SMS MFA is widely regarded as insecure because of the proliferation of SIM jacking
Domain Matching 2FA
While more secure than ordinary push 2fa, users that don't read the hostname could still be phished. Domain matching 2FA solves this problem by replacing the number with a domain. Let's take a look at this in action. Here are a couple of notes: Domains should vary: using 1 domain may cause users to simply remember and re-enter that domain (it is possible to implement a similar approach with 1 doma
Introducing Passage by 1Password – the simple way to add passkey support to your app or website | 1Password
Toward the end of last year, Passage joined 1Password to bring passwordless authentication to everyone. Now, we’re ready to introduce you to Passage by 1Password: the fastest and most secure way for developers and businesses to add passkey support to their products. According to a FIDO Alliance survey, 58% of consumers in the U.S. have abandoned purchases due to the difficulty of managing password
Bitwarden design flaw: Server side iterations
In the aftermath of the LastPass breach it became increasingly clear that LastPass didn’t protect their users as well as they should have. When people started looking for alternatives, two favorites emerged: 1Password and Bitwarden. But do these do a better job at protecting sensitive data? For 1Password, this question could be answered fairly easily. The secret key functionality decreases usabili
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
GitHub - Permify/permify: Permify is an open-source authorization service inspired by Google Zanzibar.
GitHub - smallstep/certificates: ðŸ›¡ï¸ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
Boost Your User Management and Authentication with Ory Kratos 1.0: Discover the Latest Release
Release v1.0.0 · ory/kratos
GitHub - IridiumIdentity/iridium: An OIDC provider integrator. Choose your social providers without needing to write code.
Understanding Passkeys
The beginning of the end of the password
Google Authenticator now supports Google Account synchronization
{{#tags}}- {{label}}
{{/tags}}