Published inIdentity Beyond Borders·Feb 8Member-onlyPrivate Key JWT authentication in WSO2 Identity ServerPrivate Key JWT is a method of client authentication where the client creates and signs a JWT using its own private key. Confidential clients use an assertion to authenticate the authorization server’s token endpoint. Why authenticate OAuth 2.0 clients? Client authentication ensures the tokens get issued to a legitimate client and not some other, potentially…Client Authentication6 min readClient Authentication6 min read
Published inIdentity Beyond Borders·Jan 25Member-onlyHow Asgardeo increase the password complexity?Having a strong password is one of the most important steps in protecting your online accounts. Weak passwords can be easily guessed or cracked, which can lead to identity theft, financial loss, and other serious consequences. Please check my previous article “Make passwords hard to guess!” …Asgardeo3 min readAsgardeo3 min read
Published inDataDrivenInvestor·Jan 12Member-onlyEncryption Vs Encoding Vs Hashing Vs ObfuscationEncryption.. Encoding… Hashing… Obfuscation… You may have heard these words for sure. These terms are commonly used. But sometimes we may used then incorrectly and interchanged. But, all of them differ a lot. In this article. we will be learning how they differ. Encryption To prevent unwanted parties from reading a…Encryption3 min readEncryption3 min read
Published inDataDrivenInvestor·Jan 5Member-onlyMake passwords hard to guess!Almost everything you do online requires a password, and you probably use a number of different passwords every day. Choosing secure passwords and keeping them up to date might sometimes feel tedious. Fortunately, there are easy ways to increase the security of your passwords. …Password Security4 min readPassword Security4 min read
Published inGeek Culture·Nov 11, 2022Member-onlyWhy Mockito?A Testing Tool — Mock.. PowerMock.. We may have came across these terms while writing tests for our code base. In unit testing, we wish to test a class’s functions separately. But generally, the classes are not independent. One class will invoke methods of another class. …Mockito4 min readMockito4 min read
Published inIdentity Beyond Borders·Oct 10, 2022Member-onlySelf Registration with AsgardeoAsgardeo provides the capability of self-registration of users where a new user can create a user account in Asgardeo by himself/herself rather than letting the administrator create an account for them. Asgardeo provides two major categories for sign-up (which are same for login) for a business user. Create a new…Self Registration3 min readSelf Registration3 min read
Published inIdentity Beyond Borders·Jun 13, 2022Member-onlyAuth Code Flow with PKCEThe Authorization Code Flow + PKCE is an OpenId Connect flow specifically designed to authenticate public client applicationcs (native or mobile) application users. The Proof Key for Code Exchange (PKCE) is a specification supported by WSO2 Identity Server to mitigate code interception attacks. PKCE, pronounced “pixie” is an acronym for…Pkce3 min readPkce3 min read
Published inIdentity Beyond Borders·Jun 7, 2022Member-onlyJourney of Biometric AuthenticationSupports a real digital identity — Traditional Authentication Over 90% of businesses today rely on Knowledge Based Authentication — usernames, passwords, silly “security” questions, which are distressingly easy to steal. …Biometric Authentication5 min readBiometric Authentication5 min read
Published inDataDrivenInvestor·May 26, 2022Member-onlyGit Rebase Vs Git MergeWhat to use? — The commands Git Rebase and Git Merge are commonly used to merge two branches. There’s a lot of discussion regarding whether git merge or git rebase is preferable. We will address all your worries regarding Git Rebase and Git Merge in today’s blog on Git Rebase versus Merge. To merge…Git Rebase3 min readGit Rebase3 min read
Published inIdentity Beyond Borders·May 22, 2022Member-onlyWriting a Custom Local Authenticator to WSO2-IS with the Archetype-isLocal authenticators authenticate a user with the available local credentials. These are the local authenticators available in Wso2 Identity Server. Basic authenticator FIDO X509Certificate TOTP The default authenticator available in the WSO2 Identity Server is the basic authenticator. …Custom Authenticator3 min readCustom Authenticator3 min read
