Auth0
@auth0

Easy to implement, adaptable authentication and authorization platform. We make your login box awesome. Status: @auth0status | Support: @auth0community

 Everywhere
auth0.com
Joined October 2012
5,993 Photos and videos
Article

How to Detect Refresh Token Hijacking and Misuse with Auth0

Refresh tokens solve one of the hardest tradeoffs in application security: keeping users logged in without keeping access tokens alive for too long. Instead of forcing users to re-authenticate every
2
3
473
Article

OpenClaw's Credential Problem Is Not a Secrets Problem

Back in January, we published a checklist for securing OpenClaw. Sandboxing, allow-lists, secret hygiene, audit logs. Good operational advice. We stand by it. Two weeks later, security researchers
4
4
2,355
Article

"I Use PKCE, So I Don't Need State." You Do. Here's Why.

I was reviewing an OAuth implementation a while back and found something that looked solid on the surface. PKCE was wired up correctly, tokens were validated, scopes were tight. The developer had

1
3
5
1,149
Load more