Community Picks

Supports popular frontend, backend, and meta frameworks like React, Vue, Svelte, and more. Provides secure email and password authentication, multiple OAuth providers for social sign-on, built-in two-factor authentication, and tools for managing user access. Extend functionality via official and community plugins.

Better Auth

Web applications often use OAuth 2.0 for data security, which involves storing access tokens. This piece examines various browser storage solutions like local storage, session storage, and cookies, highlighting their vulnerabilities to XSS and CSRF attacks. The token handler pattern is recommended for enhancing security, suggesting encrypted tokens stored in secure cookies and managed by backend components.

Best Practices for Storing Access Tokens in the Browser

evolvedev

Part 2 of the tutorial explores core features of a Google Drive downloader in Go, focusing on handling multiple concurrent downloads, updating progress in real-time, and managing cancellations. To fully benefit, refer to Part 1 for foundational setup including Google OAuth integration.

Building a Google Drive Downloader in Golang (Part 2)

An open standard for authorization that enables third-party applications to access resources on behalf of users without sharing their credentials. Readers can learn about OAuth's authorization flows, tokens, and security considerations for implementing authentication and authorization in web and mobile applications.

Best of OAuth — October 2024