Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 209331
1 vote

Circular dependency in microservices architecture for Authentication

There are "many different and valid ways" to do OAuth2 but I would recommend using cryptographic signatures on the tokens. …
JimmyJames's user avatar
  • 28.9k
19 votes

Is Password Hashing Bad?

The specific claim: "Password hashing is bad" is somewhat odd. If you are supporting passwords, hashing is pretty important. The more interesting and more contentious (based on the other comments an …
JimmyJames's user avatar
  • 28.9k
1 vote

Handling OAuth 2.0 access token

Authentication and authorization are typically checked while handling a request. Unless you have specific requirements specifying that you must do something more, keep it simple. Trying to do this k …
JimmyJames's user avatar
  • 28.9k
1 vote

How to combine session-based authentication and stateless REST API

This article walks through various ways to use OAuth2. It might help you work through this. …
JimmyJames's user avatar
  • 28.9k