#OIDC
23 related articles
·2 min
Pocket ID Achieves Official OIDC Certification and Adds OAuth 2.0 Authorization Support
Pocket ID v2.10.0 achieves OpenID Connect Certified™ status and adds OAuth 2.0 Resource Servers & Scopes. A lightweight, Passkey-first SSO solution for homelab self-hosting.
Read more →
·3 min
UnYOLO: A GitHub Credential Broker and Policy Engine for AI Agents
UnYOLO is an AI Agent credential broker and policy engine for GitHub, enforcing least-privilege access, short-lived tokens, and policy rules to secure agent operations.
Read more →
·3 min
Android Webcam Project: Open-Source Solution to Turn Your Phone into a Webcam with 4K/RTSP Support
Android Webcam Project is a GPL-3.0 open-source tool that turns Android phones into PC webcams, supporting 4K streaming, RTSP/H.264, hardware decoding, and virtual camera output—completely free with no watermarks.
Read more →
·4 min
Shai-Hulud Supply Chain Attack: In-Depth Analysis of the Keyv npm Package Compromise and Defense Guide
In-depth analysis of how the Shai-Hulud worm-like supply chain attack compromised Keyv and other popular npm packages, with developer investigation and long-term defense strategies.
Read more →
·3 min
authentik: A Complete Guide to the Open-Source Self-Hosted Identity Authentication Platform
Explore authentik, an open-source identity authentication platform supporting SSO, OAuth2, SAML, and LDAP with self-hosted data sovereignty for enterprise identity management and Homelab setups.
Read more →
·4 min
Guide to Securely Exposing Self-Hosted Services: From Tailscale to Defense in Depth
Complete guide to securely exposing self-hosted services: Tailscale zero-exposure, reverse proxy setup, Cloudflare Tunnel, Authelia auth gateway, server hardening, and 3-2-1 backup strategy.
Read more →
·3 min
Warpgate 0.27 Released: Open-Source Bastion Host Adds RDP/VNC and Cluster Support
Warpgate 0.27 adds transparent RDP/VNC proxy, OTP/SSO integration, cluster scaling, and TLS hot-reload. A FOSS alternative to Teleport requiring no agents or clients for unified privileged access.
Read more →
·2 min
Basedash Audit Logs Explained: Compliance and Security Tracking for an AI-Driven BI Tool
Basedash launches native audit logs tracking AI queries, user actions, and config changes with SIEM integration and custom retention for enterprise BI compliance.
Read more →
·3 min
The Curse of the SSO Tax: Open Source Projects Shouldn't Lock Security Behind Paywalls
Exploring the SSO Tax in open source: why locking SSO and OIDC behind paywalls betrays user security, and how maintainers can monetize sustainably without sacrificing safety.
Read more →
·3 min
The Scourge of the SSO Tax: Open Source Projects Shouldn't Lock Security Behind Paywalls
An in-depth look at the SSO Tax in open source: why locking SSO and OIDC behind paywalls betrays user security, and how maintainers can monetize sustainably without sacrificing it.
Read more →
·3 min
AI Agent Authentication and Authorization: Core Analysis of the IETF Draft and Security Best Practices
Deep analysis of the IETF Internet-Draft on AI Agent authentication and authorization, covering identity attribution, delegation chains, least privilege, OAuth 2.0 extensions, and MCP integration.
Read more →
·6 min
Securely Exposing Self-Hosted Services via VPS: Architecture & Practical Guide
Learn how to securely expose self-hosted services via VPS using WireGuard tunnels, Pangolin, and reverse proxies — enabling client-free access to Plex, Immich, and more while hiding your home IP.
Read more →
·3 min
ChatGPT Client Widespread Outage: Why the App Fails While the Web Version Works
ChatGPT's iOS and macOS clients suffered a global outage with preauth_cookie_device_check_failed and 403 errors, while the web version worked fine. Here's why.
Read more →
·3 min
LangGraph Production Template in Practice: A Complete Guide to Budget Control and Canary Routing
Deep dive into langgraph-agent-stack: per-run dollar budget control, canary traffic routing, Mock testing mode, and 800+ test cases to safely deploy AI Agents from demo to production.
Read more →
·2 min
Tailscale: Build a Secure Private Network Effortlessly with WireGuard
Tailscale is a modern networking tool built on WireGuard that automates key exchange, node discovery, and routing. Supports SSO and 2FA. Perfect for remote work, self-hosting, and multi-cloud setups.
Read more →
·4 min
SparkyFitness: The Rise of an Open-Source, Self-Hosted Health Tracking App
SparkyFitness is an open-source, self-hosted alternative to MyFitnessPal and Flo. In one year: 4,500 users, 73 contributors, covering nutrition, sleep, women's health, GLP-1 tracking, and more.
Read more →
·7 min
Decoding the Government Software Security Executive Order: New Supply Chain Compliance and SBOM Requirements
The new U.S. Executive Order requires government software suppliers to provide verifiable security assurances and mandates the SBOM system. This article analyzes the policy's core demands, real impact on suppliers, and the chain of challenges.
Read more →
·6 min
The Truth About "GPT-5.6": Debunking Fake Rumors and Third-Party Top-Up Scams
The rumored "ChatGPT 5.6 release" is fake—OpenAI never launched it. Learn about account security risks of third-party top-ups, the truth behind low-price scams, and how to spot AI misinformation.
Read more →
·5 min
Git Hash Chain Malleability: How Fragile Is the Immutability You Trust?
Are Git hash chains truly immutable? This article dives into Git hash chain malleability, SHA-1 collision risks, and security boundaries, offering practical tips like GPG signing and SHA-256 migration to build a correct Git security trust model.
Read more →
·2 min
The Real Challenge of Government AI Localization: How OpenGENAI Decouples Cloud Dependencies
OpenGENAI transforms Japan's government AI app into a fully localized deployment. Learn how it decouples cloud auth, backend, and LLM inference for data sovereignty.
Read more →