Record · corpus.blog/posts/01a087ad-0615-73f2-919f-e842a099d1ca

What's the best way to do authentication in modern applications

neciudan.dev · published 4 July 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at neciudan.dev Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 19
Words captured: 5,549

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://neciudan.dev/master-security

neciudan.dev

https://datatracker.ietf.org/doc/html/draft-ietf-oauth-browser-based-apps

datatracker.ietf.org

https://www.rfc-editor.org/rfc/rfc9700

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc6749

rfc-editor.org

https://auth0.com/blog/the-backend-for-frontend-pattern-bff/

auth0.com

https://docs.duendesoftware.com/bff/

docs.duendesoftware.com

https://curity.io/resources/learn/the-token-handler-pattern/

curity.io

https://auth0.com/docs/secure/tokens/refresh-tokens/refresh-token-rotation

auth0.com

https://www.rfc-editor.org/rfc/rfc9449.html

rfc-editor.org

https://developer.chrome.com/docs/web-platform/device-bound-session-credentials

developer.chrome.com

Please Don't Use JSON Web Tokens for Browser Sessions Read at the source ↗

ianlondon.github.io

https://gist.github.com/samsch/0d1f3d3b4745d778f78b230cf6061452

gist.github.com

https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html

cheatsheetseries.owasp.org

https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html

cheatsheetseries.owasp.org

https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/06-Session_Management_Testing/02-Testing_for_Cookies_Attributes

owasp.org

https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/Cookies

developer.mozilla.org

https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Sec-Fetch-Site

developer.mozilla.org

https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/CSP

developer.mozilla.org

https://developer.mozilla.org/en-US/docs/Web/API/BroadcastChannel

developer.mozilla.org