Skip to content
Standard Reader
Log in
Tag

Authentication

Articles and publications tagged Authentication across the Atmosphere.

180articles62publications
kozhevnikova
kozhevnikovaNov 8, 2026
File Browser exposure is an authentication and path trust problem
File Browser proxy authentication, filesystem scope, and 2026 ZoomEye count observations.
File BrowserZoomEye
eiuspkz
eiuspkzNov 6, 2026
SNMPv3 Users Are Scoped to an Authoritative Engine
Why SNMPv3 users, keys, views, and access policy must be reviewed per authoritative engine.
SNMPv3network monitoring
ioneyrezende
ioneyrezendeNov 5, 2026
Statping-ng inventory starts with administrator defaults
A small status-page footprint with a high-value administrator and API surface.
zoomeyemonitoring
ivanova
ivanovaNov 5, 2026
Cosmos Cloud URL authentication is a per-resource decision
A measured analysis of Cosmos Cloud URL protection, management permissions, Docker authority, tokens, and backups.
zoomeyereverse-proxy
eiuspkz
eiuspkzNov 5, 2026
CloudBeaver proxy header authentication must fail closed
A measured review of CloudBeaver reverse-proxy headers, authentication modes, API tokens, database connections, and bypass tests.
zoomeyedatabase
jeffreyciend
jeffreyciendNov 5, 2026
Matomo token_auth placement decides where secrets leak
Matomo token_auth transport and permission scope determine whether analytics credentials leak through URLs and logs.
securityZoomEye
ivanova
ivanovaNov 4, 2026
Headlamp Logins Inherit the Kubernetes Token Behind Them
Headlamp exposure review must trace proxy authentication, the forwarded Kubernetes identity, service-account scope, and direct Ingress bypasses.
ZoomEyeHeadlamp
andreagomez205
andreagomez205Nov 3, 2026
Tenant boundaries in WebAuthn start with the RP ID
RP ID, origin, and user-handle isolation for multi-tenant WebAuthn deployments.
webauthnmulti-tenant
ioneyrezende
ioneyrezendeOct 31, 2026
pgAdmin discovery should focus on server-mode identity and proxy trust
A bounded review of pgAdmin server-mode discovery and proxy identity trust.
zoomeyepgadmin
johnettagaweraks
johnettagaweraksOct 30, 2026
Why a sudo timestamp is a privilege boundary, not a convenience
A review of sudo timestamp scope, terminal behavior, command restrictions, and audit evidence.
linuxprivilege
ioneyrezende
ioneyrezendeOct 28, 2026
Designing neutral authentication errors after CVE-2026-11960
Design guidance for neutral authentication failures using the FacturaScripts fix as an example.
vulnerabilityfacturascript
ioneyrezende
ioneyrezendeOct 24, 2026
The fast-jwt fix for algorithm confusion missed the prefix
CVE-2026-107722 reopens RSA to HS256 algorithm confusion in fast-jwt 6.2.x because PEM detection trims whitespace while the header matcher stays start-anchored.
jwtauthentication
LocalStack Blog
LocalStack BlogSep 25, 2026
Testing Cognito Authentication Flows Locally with LocalStack
Learn how to build and test Cognito flows against LocalStack: the hosted UI with auth code and PKCE, JWT verification against the pool's JWKS in an API Gateway authorizer, TOTP multi-factor auth, and machine-to-machine tokens from the client credentials grant.
CognitoAuthentication
LocalStack Blog
LocalStack BlogSep 25, 2026
Testing Cognito Authentication Flows Locally with LocalStack
Learn how to build and test Cognito flows against LocalStack: the hosted UI with auth code and PKCE, JWT verification against the pool's JWKS in an API Gateway authorizer, TOTP multi-factor auth, and machine-to-machine tokens from the client credentials grant.
CognitoAuthentication
LocalStack Blog
LocalStack BlogSep 25, 2026
Testing Cognito Authentication Flows Locally with LocalStack
Learn how to build and test Cognito flows against LocalStack: the hosted UI with auth code and PKCE, JWT verification against the pool's JWKS in an API Gateway authorizer, TOTP multi-factor auth, and machine-to-machine tokens from the client credentials grant.
CognitoAuthentication
LocalStack Blog
LocalStack BlogSep 25, 2026
Testing Cognito Authentication Flows Locally with LocalStack
Learn how to build and test Cognito flows against LocalStack: the hosted UI with auth code and PKCE, JWT verification against the pool's JWKS in an API Gateway authorizer, TOTP multi-factor auth, and machine-to-machine tokens from the client credentials grant.
CognitoAuthentication
LocalStack Blog
LocalStack BlogSep 25, 2026
Testing Cognito Authentication Flows Locally with LocalStack
Learn how to build and test Cognito flows against LocalStack: the hosted UI with auth code and PKCE, JWT verification against the pool's JWKS in an API Gateway authorizer, TOTP multi-factor auth, and machine-to-machine tokens from the client credentials grant.
CognitoAuthentication
LocalStack Blog
LocalStack BlogSep 25, 2026
Testing Cognito Authentication Flows Locally with LocalStack
Learn how to build and test Cognito flows against LocalStack: the hosted UI with auth code and PKCE, JWT verification against the pool's JWKS in an API Gateway authorizer, TOTP multi-factor auth, and machine-to-machine tokens from the client credentials grant.
CognitoAuthentication
LocalStack Blog
LocalStack BlogSep 25, 2026
Testing Cognito Authentication Flows Locally with LocalStack
Learn how to build and test Cognito flows against LocalStack: the hosted UI with auth code and PKCE, JWT verification against the pool's JWKS in an API Gateway authorizer, TOTP multi-factor auth, and machine-to-machine tokens from the client credentials grant.
CognitoAuthentication
LocalStack Blog
LocalStack BlogSep 25, 2026
Testing Cognito Authentication Flows Locally with LocalStack
Learn how to build and test Cognito flows against LocalStack: the hosted UI with auth code and PKCE, JWT verification against the pool's JWKS in an API Gateway authorizer, TOTP multi-factor auth, and machine-to-machine tokens from the client credentials grant.
CognitoAuthentication
LocalStack Blog
LocalStack BlogSep 25, 2026
Testing Cognito Authentication Flows Locally with LocalStack
Learn how to build and test Cognito flows against LocalStack: the hosted UI with auth code and PKCE, JWT verification against the pool's JWKS in an API Gateway authorizer, TOTP multi-factor auth, and machine-to-machine tokens from the client credentials grant.
CognitoAuthentication
LocalStack Blog
LocalStack BlogSep 25, 2026
Testing Cognito Authentication Flows Locally with LocalStack
Learn how to build and test Cognito flows against LocalStack: the hosted UI with auth code and PKCE, JWT verification against the pool's JWKS in an API Gateway authorizer, TOTP multi-factor auth, and machine-to-machine tokens from the client credentials grant.
CognitoAuthentication
LocalStack Blog
LocalStack BlogSep 25, 2026
Testing Cognito Authentication Flows Locally with LocalStack
Learn how to build and test Cognito flows against LocalStack: the hosted UI with auth code and PKCE, JWT verification against the pool's JWKS in an API Gateway authorizer, TOTP multi-factor auth, and machine-to-machine tokens from the client credentials grant.
CognitoAuthentication
LocalStack Blog
LocalStack BlogSep 25, 2026
Testing Cognito Authentication Flows Locally with LocalStack
Learn how to build and test Cognito flows against LocalStack: the hosted UI with auth code and PKCE, JWT verification against the pool's JWKS in an API Gateway authorizer, TOTP multi-factor auth, and machine-to-machine tokens from the client credentials grant.
CognitoAuthentication