Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

awesome-authentication

Resources to learn and implement authentication in your application
https://github.com/gitcommitshow/awesome-authentication

Last synced: 5 days ago
JSON representation

Fundamentals You Must Know
- Cryptography
- About Tokens
  - JWT vs Opaque tokens
- About Frameworks
  - **OpenIDConnect** - authentication on top of OAuth2.0
- Web-Security Recommendations
  - Authentication cheatsheet by OWASP
  - The OAuth 2.0 Authorization Framework: Bearer Token Usage
- Secure Key Exchange In Public
- Maintaining Forward Secrecy
  - Double Rachet Algo
  - Signal protocol specs - protocol-javascript)
- Invalidating JWT
  - Strategies to invalidate jwt - SO Q&A
  - Discussion: Is refreshing an expired JWT token a good strategy?
Securtity Risks and Criticism of JWT
- Invalidating JWT
  - JWT attack - signature as MAC
  - Recreating JWT validation bypass
  - 3 JWT design flaws
  - Stop using JWT for sessions - using-jwt-for-sessions-part-2-why-your-solution-doesnt-work/)
  - Why JWTs Suck as Session Tokens
  - No Way, JOSE! Javascript Object Signing and Encryption is a Bad Standard That Everyone Should Avoid
  - Things to Use Instead of JWT
  - Branca as an Alternative to JWT?
  - Paseto is a Secure Alternative to the JOSE Standards (JWT, etc.)
Implementations(Examples/Demos)
- Invalidating JWT
Useful Tools
- Invalidating JWT
  - Learn JWT by reverse engineering

Programming Languages

TypeScript 3 JavaScript 3 Go 1

Categories

Implementations(Examples/Demos) 58 Fundamentals You Must Know 17 Securtity Risks and Criticism of JWT 9 Useful Tools 1

Sub Categories

Invalidating JWT 70 Cryptography 6 Secure Key Exchange In Public 3 Maintaining Forward Secrecy 2 Web-Security Recommendations 2 About Frameworks 1 About Tokens 1

Keywords

oauth2 3 express 2 authorization 2 openid-connect 2 server 1 security 1 openid-provider 1 openid-connect-provider 1 openid 1 oidc 1 oauth2-server 1 oauth2-provider 1 oauth-provider 1 oauth 1 identity 1 hydra 1 federation 1 docker 1 cloud 1 oauth2orize 1 signature 1 rsa 1 rfc-7519 1 learning-by-doing 1 jwt 1 authentication 1 rbac 1 permissions 1 permission 1 nodejs 1 node 1 js 1 javascript 1 casbin 1 authz 1 auth 1 acl 1 access-control 1 abac 1 web 1 sso 1