Application Security
Why SAML's Fragile Architecture Is Finally Forcing SSO to OIDC
SAML's reliance on XML canonicalization and enveloped signatures creates unfixable security flaws, driving the enterprise shift to OpenID Connect.
Topic
Authentication
A collection of essays to explore, one idea at a time.
Essays
Newest first
Authentication
Stop Saving Tokens in LocalStorage: Use HttpOnly Cookies
LocalStorage is vulnerable to XSS. Learn why you should stop storing JWTs there and switch to HttpOnly cookies for secure authentication.