OIDC: The Identity Boundary Behind Login
A practical introduction to OpenID Connect: what problem it solves, when it is worth using, how it fits login and payments, and how it differs from OAuth, SAML, CAS, LDAP, JWT, and passkeys.
OAuth
2 posts
How to Implement Login with GitHub Safely
A practical server-side GitHub OAuth login flow using state validation, authorization code exchange, GitHub user lookup, and a local session.