#oauth2

Articles tagged with #oauth2

Auth at the Boundary: Integrating Feide Identity via the BFF
Connecting the BFF to Feide — Norway's government-issued identity provider for educational organisations. OAuth 2.0 + OIDC flow, the Token Handler pattern, and why cookie-based sessions beat tokens in the browser.
Apr 12, 202618 min read5
Implementing an OIDC Callback in PHP/Yii/HumHub (with Code Examples)
A practical, end-to-end guide to handling OIDC redirects, token exchange, identity mapping, and secure session creation inside a Yii/HumHub app
Dec 15, 20256 min read5
Lessons Learned & Practical Advice for Developers from my implemented Web App
Real-world insights from integrating an external IdP into a legacy PHP ecosystem—and what developers should know before building their own auth system
Dec 11, 20256 min read21
Security Analysis of my implemented Web App Authentication System
A detailed look at the security mechanisms behind the authentication flow—how threats are mitigated, tokens are validated, and sessions are protected
Dec 11, 20256 min read15
Deep Dive: The User Authentication Flow in my implemented Web App
A step-by-step walkthrough of how the browser, IdP, Redis, HumHub, and CloudFront work together to authenticate a user in a real production system.
Dec 10, 20256 min read19
Architecture Overview of my implemented Web App Authentication System
A high-level walkthrough of how the CSL web app authenticates users through a hybrid IdP + server-session design
Dec 9, 20258 min read47