📰 Dev.to · authagonal

Monitoring is the code that only runs during a disaster, the one moment you cannot afford to find it broken. So we built a harness that drives a real signal for

A hundred megabytes of documentation screenshots moved to Cloudflare R2, behind a CDN base the app derives from its own hostname at runtime. It worked in the br

We added a signature-checking admission webhook to our Kubernetes cluster so unsigned images could never run. Hours later one Deployment had 2,242 ReplicaSets,

Ihr Terraform-State ist eine vollständige Landkarte Ihrer Cloud plus ein Stapel Geheimnisse, und standardmäßig liegt er hinter einem öffentlichen Endpunkt. So h

Your SP validated the assertion signature, pinned the certificate, and logged the user in. Every check passed. I still replayed a login I captured an hour ago.

We challenged the second factor on the login page and never re-checked it at the token endpoint. So a valid password plus a hand-edited return URL walked straig

La mayoría de los proveedores de auth encierran SSO, SCIM, MFA y los registros de auditoría detrás de un plan Enterprise. Nosotros los pusimos todos en el plan

Azure Table Storage and DynamoDB have no delete markers, so a deleted row just vanishes, which means your incremental backup never sees the delete at all. Resto

Our rate limiter and lockout counter keyed off the client IP. Behind nginx that IP came from a header the client could set, so one rotating header handed every

Tu estado de Terraform es un mapa completo de tu nube más un montón de secretos, y por defecto vive detrás de un endpoint público. Así fue como arrancamos el es

Un endpoint de restablecimiento de contraseña sin autenticación y sin límite de tasa por correo no es solo tu problema. Apúntalo a la bandeja de entrada de otra

Azure Table Storage te da una partition key, una row key y casi nada más. Sin joins, sin secondary indexes que merezcan el nombre, sin incremento. Aun así, ejec

Azure Table Storage gives you a partition key, a row key, and almost nothing else. No joins, no secondary indexes worth the name, no increment. We run a multi-t

An unauthenticated password-reset endpoint with no per-email rate limit is not just your problem. Point it at someone else's inbox and you have turned their res

Most auth vendors fence SSO, SCIM, MFA, and audit logs behind an Enterprise plan. We put all of them on the $0 tier. Here is the unit economics that makes givin

Single sign-on means trusting the identity provider. We trusted it for one thing too many: we resolved returning federated users by the email in the assertion,

Azure Container Apps prometía que dejáramos de pagar por un clúster de autenticación inactivo. Calculamos el coste de la migración y la descartamos, no por el p

Azure Container Apps promised to stop us paying for an idle auth cluster. We costed the migration and killed it, not over price or cold starts, but because serv

O setor da autenticação cobra pela permissão, não pelo custo. Tranca o SSO, o MFA e o aprovisionamento atrás de níveis e tarifas por ligação, por funcionalidade

Login is a weekend. The bill arrives after: signature verification, SCIM deprovisioning, MFA, audit logs, key rotation, breach liability, and on-call for a tier

Two of our tenants were the same tenant. They had different names, different signups, and different...

We sell authentication, which makes our scariest question a simple one: when a customer wires their...

There's a version of dogfooding that's a slogan, and a version where your own employees can't ship...

Your Terraform state file is the single most sensitive artifact in your cloud. It is a complete map...