A Google OAuth bug in my side project accidentally allowed citizens to access an admin...
A Google OAuth bug in my side project accidentally allowed citizens to access an admin dashboard.
Three months later, that same debugging experience helped me contribute to designing a secure cross-application authentication flow at work.
This post walks through the bug, how I fixed it, and how those same ideas translated into an enterprise SSO architecture.
Table of Contents
The Side Project
Originally published at imrantech.hashnode.dev The Honest Starting Point When my tech...
So recently I took on a challenge to learn advanced backend engineering all by myself. Quite a huge...
A practical guide to auditing authentication in a Next.js SaaS starter before it breaks across...
We spent an afternoon convinced the identity provider was broken. Login worked locally. Staging...
A real incident from the finance app I build solo. The security design was textbook. That's exactly...
The short version My GitHub personal access token was exfiltrated — most likely by a supply-chain...
