links.lmorchard.com - #auth

Custom OIDC providers · Tailscale Docs

Tue, 28 Oct 2025 21:30:35 +0000

Tailscale can integrate with identity providers that support OpenID Connect (OIDC). The steps provided in this topic are required only for initial creation of a tailnet. After the signup process is completed, Tailscale will work like any other supported identity provider. For more information about OIDC, refer to Welcome to OpenID Connect.

Tags: #admin #auth #oidc #sso #tailscale

Integrate with Tailscale | authentik

Tue, 28 Oct 2025 21:29:49 +0000

Tailscale requires a properly configured WebFinger endpoint at .well-known/webfinger on the domain used for your email. Set this up according to your web server or application specifications.

Tags: #admin #auth #authentik #sso #tailscale

Using your self-hosted Authentik as an Identity Provider for Tailscale

Tue, 28 Oct 2025 21:26:39 +0000

Another cool thing about Tailscale is that they try to keep as little information about their users as possible, and so do not have their own login mechanism, instead leaving this task to common authentication providers like Google and Microsoft, or allowing the use of any identity provider compatible with OpenID Connect, which is the case for Authentik, and the topic of this post.

Tags: #auth #authentik #oidc #sysadmin #tailsale

Pocket ID

Thu, 27 Mar 2025 00:13:27 +0000

Pocket ID is a simple and easy-to-use OIDC provider that allows users to authenticate with their passkeys to your services.

Tags: #auth #homelab #oidc #pocketid

lastlogin-net/obligator: Simple and opinionated OpenID Connect server designed for self-hosters

Sat, 15 Feb 2025 19:22:28 +0000

Simple and opinionated OpenID Connect server designed for self-hosters

Tags: #auth #oidc #openid #webdev

Introduction | Better Auth

Fri, 29 Nov 2024 19:50:39 +0000

Better Auth is framework-agnostic authentication (and authorization) framework for TypeScript. It provides a comprehensive set of features out of the box and includes a plugin ecosystem that simplifies adding advanced functionalities. Whether you need 2FA, multi-tenant support, or other auth releated features. It lets you focus on building your actual application instead of reinventing the wheel.

Tags: #auth #typescript #webdev

Passwordless - A node.js/express module for token-based logins

Sun, 19 Oct 2014 03:34:06 +0000

Passwords are broken. Inspired by Justin Balthrop's article Passwords are Obsolete token-based one-time password (OTPW) authentication is faster to deploy, better for your users, and more secure.

Tags: #auth #authentication #imported:pinboard #nodejs #security

Passwordless - A node.js/express module for token-based logins

Sun, 19 Oct 2014 03:34:06 +0000

Passwords are broken. Inspired by Justin Balthrop's article Passwords are Obsolete token-based one-time password (OTPW) authentication is faster to deploy, better for your users, and more secure.

Tags: #auth #authentication #nodejs #security

Python Twitter + django-social-auth == Hello New User

Fri, 04 Apr 2014 21:23:53 +0000

This will post a new tweet on behalf of the user, telling everyone they joined your website!

Tags: #auth #imported:pinboard #python #twitter #webdev

Python Twitter + django-social-auth == Hello New User

Fri, 04 Apr 2014 21:23:53 +0000

This will post a new tweet on behalf of the user, telling everyone they joined your website!

Tags: #auth #python #twitter #webdev

Cross-client Identity - Google Accounts Authentication and Authorization — Google Developers

Thu, 23 May 2013 14:57:37 +0000

When developers build software, it routinely includes modules that run on a Web server, other modules that run in the browser, and others that run as native mobile apps. Both developers and the people who use their software typically think of all these modules as part of a single app. Google’s OAuth2 implementation supports this view of the world

Tags: #auth #gluecon #google #identity #imported:pinboard

Secure Your REST API... The Right Way | Stormpath

Thu, 23 May 2013 00:21:25 +0000

We already showed you how to build a Beautiful REST+JSON API, but how do you secure your API? At Stormpath we spent 18 months researching best practices, implementing them in the Stormpath API, and figuring out what works. Here’s our playbook on how to secure a REST API.

Tags: #apis #auth #gluecon #imported:pinboard #rest #security #services

gbraad/html5-google-authenticator

Mon, 01 Oct 2012 18:00:09 +0000

A simple Google Authenticator app written in HTML

Tags: #auth #authentication #google #html5 #imported:pinboard #security #webdev

Introducing django-lazysignup — Stereoplex

Wed, 08 Aug 2012 21:10:22 +0000

So I started wondering - what if we just created a real user for every person who visited the site? Django already has support for creating users with unusable passwords - so if we just create a user with an unusable password every time a new person comes along, log them in, and then at some future point (presumably once they've fallen in love with your site) they can set themselves up with a real username and password. And as a bonus, all that data that they created while messing about with the site sticks around, and carries over into their 'real' user.

Tags: #auth #authentication #django #imported:pinboard #lazuser #webdev

Django snippets: Support alternative authentication mechanisms with Piston

Fri, 03 Sep 2010 17:51:34 +0000

"This snippet for Piston allows you to offer a choice of authentication methods to clients."

Tags: #auth #basic #django #http #oauth #piston #webdev