On JavaScript's Weirdness(stack-auth.com)
85 points by n2d4 | 70 comments
85 points by n2d4 | 70 comments
847 points by ezekg | 475 comments
Documentation landing page for GitHub Stacked PRs, a private-preview feature and gh stack CLI for splitting large changes into small, dependent pull requests.
348 points by terryds | 147 comments
Cloudflare blog post announcing OAuth support available to all developers to build third-party apps integrating with Cloudflare accounts.
530 points by bastienbeurier | 255 comments
Nango blog post explaining why implementing OAuth across the 50 most popular APIs remains messy and inconsistent in 2023.
374 points by franciscop | 119 comments
A blog post written as short letters to OAuth providers like GitHub and Facebook, pointing out spec violations such as token endpoints returning 200 for errors.
344 points by vinhnx | 95 comments
Astral blog post by William Woodruff describing the techniques Astral uses to secure its open source tools and their build, test, and release processes against supply chain attacks.
584 points by oherrala | 252 comments
Blog post arguing that APIs should fail visibly on plain HTTP requests instead of redirecting to HTTPS, noting many major API providers don't.
761 points by ejohnso49 | 394 comments
PHP Foundation blog post on a PHP security release fixing two critical RCE vulnerabilities, how they were found, the disclosure leak, and how PHP security work is being strengthened.