Auth

CloudFlare

Native FreeBSD Kerberos/LDAP with FreeIPA/IDM

• https://vermaden.wordpress.com/2026/02/18/native-freebsd-kerberos-ldap-with-freeipa-idm/
• https://news.ycombinator.com/item?id=47059520

Show HN: Moribito – A TUI for LDAP Viewing/Queries

• https://github.com/ericschmar/moribito
• https://news.ycombinator.com/item?id=45102664

Breaking WebAuthn, FIDO2, and Forging Passkeys

• https://www.nullpt.rs/forging-passkeys
• https://news.ycombinator.com/item?id=44329658

Identity Assertion Authorization Grant

• https://www.ietf.org/archive/id/draft-parecki-oauth-identity-assertion-authz-grant-03.html
• https://news.ycombinator.com/item?id=44265071

CloudFlare builds OAuth with Claude and publishes all the prompts

• https://github.com/cloudflare/workers-oauth-provider/
• https://news.ycombinator.com/item?id=44159166

OAuth 2.0 Flows

• https://www.workflows.guru/resources/oauth2-flows-explained
• https://news.ycombinator.com/item?id=44154281

Implementing TOTP two-factor authentication in 2025

• https://feeding.cloud.geek.nz/posts/totp-in-2025/
• https://news.ycombinator.com/item?id=44154856

A new generation of Tailscale access controls

• https://tailscale.com/blog/grants-ga
• https://news.ycombinator.com/item?id=44128751

Ten years of JSON Web Token and preparing for the future

• https://self-issued.info/?p=2708
• https://news.ycombinator.com/item?id=44092102

The OAuth 2.1 Authorization Framework

• https://www.ietf.org/archive/id/draft-ietf-oauth-v2-1-12.html
• https://news.ycombinator.com/item?id=43926516

Gatehouse – a composable, async-friendly authorization policy framework in Rust

• https://github.com/thepartly/gatehouse
• https://news.ycombinator.com/item?id=43466221

Auth Wiki

• https://auth.wiki
• https://news.ycombinator.com/item?id=42033295

Authorization Bypass in Next.js Middleware

• Next.js version 15.2.3 has been released to address a security vulnerability
  • https://news.ycombinator.com/item?id=43448723
• https://github.com/advisories/GHSA-f82v-jwr5-mffw
• https://news.ycombinator.com/item?id=43446291

A Comprehensive Formal Security Analysis of OAuth 2.0

• https://arxiv.org/abs/1601.01229
• https://news.ycombinator.com/item?id=43191612

Understanding Pam and Creating a Custom Module in Python – Inside Out Insights

• https://text.tchncs.de/ioi/in-todays-interconnected-world-user-authentication-plays-a-critical-role-in
• https://news.ycombinator.com/item?id=41858172

Towards a Passwordless Future

• https://www.privacyguides.org/articles/2025/03/08/toward-a-passwordless-future/
• https://news.ycombinator.com/item?id=43304567
• https://www.grc.com/ppp.htm
• https://github.com/xet7/ppp
• https://www.grc.com/sqrl/sqrl.htm - current best solution
• https://forum.lunduke.com/t/toward-a-passwordless-future/926