DEV Community

#authorization

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
AI agents that inherit your OAuth token break least privilege

AI agents that inherit your OAuth token break least privilege

Comments 1
1 min read
Authorization at the Object Level: Testing for BOLA Before Someone Else Does

Authorization at the Object Level: Testing for BOLA Before Someone Else Does

Comments
4 min read
OAuth on MCP is not the same as authorizing each tool call

OAuth on MCP is not the same as authorizing each tool call

Comments
1 min read
Read permission is not export permission

Read permission is not export permission

Comments
1 min read
API Security: The Attack Surface That Grows Without a Firewall

API Security: The Attack Surface That Grows Without a Firewall

Comments
2 min read
ABAC in Production: What Actually Breaks

ABAC in Production: What Actually Breaks

Comments
4 min read
Guarding LLM Agents: Tool Authorization Best Practices

Guarding LLM Agents: Tool Authorization Best Practices

1
Comments 1
4 min read
Pull the tenant from the auth context, not the request body

Pull the tenant from the auth context, not the request body

Comments 1
1 min read
Never trust a client-supplied tenant ID

Never trust a client-supplied tenant ID

Comments
1 min read
I Made Four Authorization Engines Answer the Same Questions

I Made Four Authorization Engines Answer the Same Questions

Comments
2 min read
The Missing Guide to Canvas LMS OAuth 2.0 Integration

The Missing Guide to Canvas LMS OAuth 2.0 Integration

Comments
4 min read
Trusted AI Agent Transactions, Part 4: PingAuthorize Policy Decisions

Trusted AI Agent Transactions, Part 4: PingAuthorize Policy Decisions

Comments
2 min read
Mandatum: Making an AI Agent's Authority a Chain You Can Verify

Mandatum: Making an AI Agent's Authority a Chain You Can Verify

1
Comments
4 min read
Authorize the object, not just the route

Authorize the object, not just the route

Comments 1
1 min read
Two of the three endpoints checked authorization

Two of the three endpoints checked authorization

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.