- Published on
[taxonomy://tagged]
Oauth2
Sort
Series
Tags
All Posts- fastapi (5)
- python (4)
oauth2 (3)
- security (3)
- homelab (3)
- red-team (3)
- mythic (3)
- c2 (3)
- offensive (3)
- sso (2)
- docker (2)
- sqlite (2)
- react (2)
- exploit (2)
- stagers (2)
- authentik (1)
- docker-compose (1)
- deployment (1)
- typescript (1)
- vite (1)
- web-dev (1)
- cve (1)
- teamcity (1)
- jetbrains (1)
- c (1)
- printnightmare (1)
- spooler (1)
- waddlecorp (1)
- podman (1)
- containers (1)
- linux (1)
- jwt (1)
- keycloak (1)
- ludus (1)
- active-directory (1)
- redirector (1)
- implants (1)
- full-stack (1)
- react-python-sqlite (1)
- sqlalchemy (1)
- shellcode (1)
- indirect-syscalls (1)
- edr (1)
- Published on
Replace our homegrown JWT auth with Keycloak as a dedicated identity provider. We cover standing up Keycloak with Docker, configuring a realm and client, and wiring FastAPI to validate tokens issued by Keycloak.- Published on
Add real authentication to the FastAPI todo API using OAuth2 password flow and JWT tokens. We cover password hashing, token issuance, protected routes, and the honest tradeoffs you need to understand before shipping this.