snagg

2 ปีที่แล้วdiscuss

Hey,

Co-founder of SlashID here (one of the companies mentioned above). I think we have exactly what you are looking for:

https://www.slashid.dev/blog/anonymous-users/

https://developer.slashid.dev/docs/access/concepts/anonymous...

Hit me up if you want to chat more: [email protected]

snagg

3 ปีที่แล้วdiscuss

Worth noting that implementing FIDO2/Passkeys is more challenging than it looks both from a UX standpoint and from a threat modeling standpoint. We tried to cover some of this in a blog post, in case anybody is interested: https://www.slashid.dev/blog/passkeys-security-implementatio...

snagg

3 ปีที่แล้วdiscuss

We are big proponent of app-layer encryption as well. We wrote extensively about how we do it for our specific use case: https://www.slashid.dev/blog/app-layer-encryption/

snagg

3 ปีที่แล้วdiscuss

Hi,

sorry for the late reply, just saw this. Do you mean to have certain pages public while others are private?

If so, yes. You can make login optional (using the slashID.forceLogin parameter. See here: https://github.com/slashid/docusaurus-slashid-login/blob/mai...) and restrict certain pages to only logged-in users. You can also use user groups/roles to further segment access to pages (https://www.slashid.dev/blog/groups-react/).

To get the slashID.orgID parameter for the theme you can sign-up here: https://console.slashid.dev/signup

If you send me an email at [email protected] and we can add you to our Slack in case you have any issues with it.

Submissions

Harnesses and post-training close the open-weight bug-finding gap

The AlphaGo moment for vulnerability research?

Deepfake Impersonation Attacks (Part 1): Anatomy of Modern Deepfakes

Protecting third-party credentials: Credential Tokenzation

Secure API and M2M Access with OAuth2 Client Credentials

Building a globally distributed Identity Platform

Passkeys Adoption Trends: Survey from Large Deployments

Single Sign-On Implementation: Security Issues and Best Practices

Exploiting Undocumented API to Regenerate Google Service Cookies

GPT in 500 Lines of SQL

Firebase Authentication User Enumeration Bug

Show HN: OpenAPI OAuth 2.0 scopes enforcement for APIs

OAuth 2.0 Scopes enforcement on APIs

Rate Limiting for Large-Scale, Distributed Applications Using GCRA

To Schnorr and Beyond

Context-Aware Authentication

On the Future of Cloud Services and BYOC

Back End Authentication and Authorization Patterns

Getting RCE in Chrome with incorrect side effect in the JIT compiler

NSA, FBI, and CISA Release Cybersecurity Information Sheet on Deepfake Threats

comments