Skip to content
~/sph.sh

authentication

11 posts

authentication
HMAC: What It Is, How It Works, and When It Is the Wrong Tool

HMAC-SHA-256 for webhooks, signed URLs, and internal auth, with runnable code in three languages and the boundary where digital signatures take over.

security · encryption · webhooks +4

AWS Cognito + Verified Permissions for SaaS Authorization1/1

Build SaaS authorization with AWS Cognito and Verified Permissions, covering Cedar policies, multi-tenant patterns, JWT flow, and cost in TypeScript.

authorization · aws · authentication +4

Amazon Cognito Deep Dive: Beyond Basic Authentication

A technical guide to advanced Amazon Cognito: custom auth flows, federation, multi-tenancy, migration strategies, and production-grade security with CDK.

aws · authentication · serverless +6

Building Custom MCP Servers: A Production-Ready Guide

Build, secure, and deploy custom Model Context Protocol servers for internal systems in TypeScript, with authentication, monitoring, and Kubernetes deployment.

typescript · mcp · nodejs +5

The Security Glossary: 50+ Terms Every Dev Team Should Know

Definitions, implementation context, and defaults for authentication, token, access control, and Zero Trust terminology that teams argue about.

security · authentication · oauth2 +2

Authentication Strategies by Industry: Banking, Healthcare, E-commerce, SaaS

One-size-fits-all auth is a myth: banking, healthcare, e-commerce and SaaS each shape the authentication architecture differently.

authentication · authorization · security +5

Build a URL Shortener with AWS CDK Part 3: Security & Custom Domains1/1

Implementing custom domains, bulk operations, URL expiration, and defense-in-depth security measures for production link shortener services.

aws-cdk · lambda · security +5

Auth0 vs Firebase Auth vs Cognito vs Supabase Auth: Which to Choose

Compare Auth0, Firebase Auth, Supabase Auth, AWS Cognito, and custom JWT: which to default to, how the pricing models differ, and the pitfalls to plan for.

authentication · cloud-providers · security

Auth0 Multiple Audiences: Token Management in Micro Frontends

Auth0 multi-audience authentication across micro frontends: token management strategies and silent authentication in React Native with WebView-based apps.

authentication · oauth2 · react-native +1

Auth0 React Native Session Management with Biometrics

A step-by-step guide to secure session management in production React Native apps with Auth0, biometric authentication, and proper token lifecycle handling.

authentication · react-native · tutorial

Migrating from Serverless Framework to AWS CDK: Part 5 - Authentication, Authorization, and IAM1/1

Implement robust authentication with Cognito, API Gateway authorizers, and fine-grained IAM policies when migrating from Serverless Framework to AWS CDK.

authorization · aws-cdk · authentication +2