Results for “authentication”

Guides implementing authentication, authorization, input validation, and OWASP Top 10 prevention with secure code patterns and validation checkpoints.

Maps and reproduces OAuth/OIDC authentication chains by tracing redirects, token exchange, and identity acceptance in controlled environments.

Provides Python code patterns for making HTTP requests with httpx, covering sync and async clients, authentication, streaming, timeouts, retries, and WebSocket support.

Integrate REST APIs in Python using requests, httpx, or official SDKs, handling authentication, rate limiting, pagination, and errors.

Set up and manage AWS Cognito user pools, identity pools, OAuth flows, and user authentication with CLI commands and Python SDK examples.

Hardens Django applications against common vulnerabilities with production settings, authentication, authorization, SQL injection and XSS prevention, and secure deployment configurations.

Authentication integration guidance — Clerk (native Vercel Marketplace), Descope, and Auth0 setup for Next.js applications. Covers middleware auth patterns, sign-in/sign-up flows, and Marketplace provisioning. Use when implementing user authentication.

Provides shared authentication utilities and data structures for Azure Communication Services, including token credential management, user identifiers, and token refresh.

Automates Xiaohongshu (Little Red Book) operations including authentication, content publishing, search, social interaction, and composite workflows via a CLI tool.

Manages Xiaohongshu (Little Red Book) login authentication by checking login status, logging in via QR code or phone verification code, and logging out.

Guides backend development across API design, authentication, databases, performance, security, scalability, and testing, with quick decision guides and defaults for production-ready systems.

Manages and analyzes Clerk authentication resources, including users, organizations, and sessions, with commands for user growth, auth health, and membership review.

Covers Firebase Authentication, Firestore, Realtime Database, Cloud Functions, Storage, and Hosting, with patterns for security rules, data modeling, and real-time listeners.

Provides exact payloads and bypass techniques for every PortSwigger JWT authentication lab variant, from unverified signatures to algorithm confusion attacks.

Exploit pervasive logical flaws in Multi-Factor Authentication (MFA/2FA) implementations to bypass the secondary authentication challenge entirely. Techniques include response manipulation, referal spoofing, token reuse, and predictable backup codes.

Deploy and manage Vercel projects using token-based authentication, avoiding interactive login. Handles deployment, environment variables, and domain management via the Vercel CLI.

Design consistent, developer-friendly REST APIs with resource naming, HTTP methods, status codes, pagination, filtering, sorting, authentication, and rate limiting.

Shares authentication, global flags, and output formatting patterns for the gws CLI, including OAuth and service account setup, command syntax, and security rules.

Build high-performance async Python APIs with FastAPI and Pydantic V2, including REST endpoints, authentication, async database operations, and WebSocket support.

Provides best practices for implementing authentication, authorization, input validation, CSRF protection, secrets management, rate limiting, and dependency security in Spring Boot services.

Test WebSocket implementations for authentication bypass, cross-site hijacking, injection attacks, and insecure message handling during authorized security assessments.

Sets up authentication in Convex apps with user management, identity mapping, and access control for providers like Convex Auth, Clerk, WorkOS AuthKit, and Auth0.

Hardens Laravel applications against common vulnerabilities with guidance on authentication, authorization, validation, CSRF, mass assignment, file uploads, secrets, rate limiting, and secure deployment.

Covers MariaDB-specific ALTER USER and SET PASSWORD syntax, including IF EXISTS semantics, authentication methods, password expiration, account locking, and resource limits.

Documents MariaDB-specific CREATE USER syntax and behavior, including authentication chaining, TLS options, resource limits, password expiry, and account locking, to help write accurate statements.

SIWA (Sign-In With Agent) authentication for ERC-8004 registered agents.

Provides production-grade FastAPI development patterns including project structure, Pydantic v2 schemas, dependency injection, async handlers, authentication, authorization, transactional service layers, and testing with httpx and pytest.

Guides the use of the asc CLI for App Store Connect, covering command discovery, canonical verbs, flags, output formats, authentication, and Apple Ads operations.

Analyzes AWS Cognito user pools and identity pools, covering authentication flows, MFA status, app client configuration, password policy, Lambda triggers, and federation setup.

Guides authentication and authorization to Google Cloud services, covering human users, service identities, Application Default Credentials (ADC), and best practices for secure access.

Configure DNS records correctly with proper TTLs, email authentication, and migration strategies.

Canvas LMS integration — fetch enrolled courses and assignments using API token authentication.

Detect and exploit NoSQL injection vulnerabilities in MongoDB, CouchDB, and other NoSQL databases to demonstrate authentication bypass, data extraction, and unauthorized access risks.

Security patterns for MCP servers including OAuth 2.0, rate limiting, input validation, and audit loggingUse when "mcp security, mcp authentication, mcp oauth, mcp rate limit, secure mcp server, mcp, security, oauth, authentication, rate-limiting, validation" mentioned.

Provides a comprehensive security checklist and code patterns for authentication, input validation, secrets management, SQL injection prevention, XSS, CSRF, rate limiting, and sensitive data exposure.

Exploit PHP type juggling vulnerabilities caused by loose comparison operators to bypass authentication, circumvent hash verification, and manipulate application logic through type coercion attacks.