rdegges

15 ms·

121.
by rdegges 8y ago
They still do that for 99% of the banks, since most banks don't support OAuth/OIDC yet :( Chase recently switched over to OIDC which was pretty neat, but for most banks, it is an absolute nightmare.
122.
by rdegges 8y ago
I'm legitimately not trying to advertise for Okta here at all. This topic is near and dear to my heart because I've been working in this industry for many years now, and it is frustrating that there is a huge focus on building mor
123.
by rdegges 8y ago
That's one of the nicer things about these flows: you can have scoped data that is allowed, and nothing more. The ideal use case here is for banks, and services that store a lot of sensitive data. If you want to pull your data from you
124.
by rdegges 8y ago
That is awesome! I'm going to forward this comment to our DevEx team and see if that's something we could do. Sounds great to me =D
125.
by rdegges 8y ago
I agree! I really liked OAuth 1.0, especially from a security POV. But, the working group has moved on, and OAuth 2 is the standard now :x
126.
by rdegges 8y ago
We don't have any official Okta Python library support at the moment :( We don't have any full-time Pythonistas on staff right now, so deprecated our old stuff. We're hoping to hire and expand that role out to build proper SD
127.
Nobody Cares About OAuth or OpenID Connect(developer.okta.com)
164 points by rdegges 8y ago|115 comments
128.
Learn JavaScript in 2019(developer.okta.com)
5 points by rdegges 8y ago|0 comments
129.
by rdegges 8y ago
Anything that earns value over time is an asset. I personally own: * Index funds (a little bit of the entire stock market): both US and international * Physical real estate: 2 houses (and hopefully purchasing more!) I also invest in: * Tryi
130.
Erosion-Resistance and Explicit Contracts (2011)(blog.heroku.com)
1 points by rdegges 8y ago|0 comments
131.
From Hero to Zero: Closing My 3rd Startup(medium.com)
3 points by rdegges 8y ago|0 comments
132.
by rdegges 8y ago
Most of the big players maintain their own datacenters. That said, if you're looking for what the "big boys" do (outside of the top few tech companies), most of them use Amazon S3: https://aws.amazon.com/s3&#x
133.
by rdegges 8y ago
+1 There are so many arguments against JWTs as session tokens. It's just so long and so much work to describe all of it and respond to each argument against each one. Sven does the best possible job of summarizing it up. Also: PASETO i
134.
by rdegges 8y ago
I've done a bit of this myself. You really have 4 primary options. 1. Save enough money so that you can live off your investments in a minimal way while working on your project. How od you do this? Calculate your yearly spend and multi
135.
Why neovim is better than vim (2015)(geoff.greer.fm)
28 points by rdegges 8y ago|9 comments
136.
What happens if your JWT is stolen(developer.okta.com)
4 points by rdegges 8y ago|0 comments
137.
PostgreSQL Extended Statistics(fluca1978.github.io)
1 points by rdegges 8y ago|0 comments
138.
A Fare Cache in a Sharded Data Cluster(hipmunk.github.io)
38 points by rdegges 8y ago|1 comments
139.
Static Sites vs. CMS(developer.okta.com)
2 points by rdegges 8y ago|0 comments
140.
by rdegges 8y ago
This is true -- it's 100% about your savings rate: how much money are you saving (net) each year? And out of that, how much are you investing? This article does an excellent job of explaining it better than I ever could: https:/&
141.
PassProtect(passprotect.io)
2 points by rdegges 8y ago|0 comments
142.
by rdegges 8y ago
I'd actually add that implicit should never be used for mobile app unless you have no backend whatsoever.
143.
by rdegges 8y ago
Unfortunately, most SPA apps don't have a server side backed and thus cannot benefit from the additional security that the Authorization Code flow provides.
144.
Everything You Need to Know About the Twelve-Factor App(developer.okta.com)
1 points by rdegges 9y ago|0 comments
145.
A Breakdown of the New SAML Authentication Bypass Vulnerability(developer.okta.com)
5 points by rdegges 9y ago|0 comments
146.
by rdegges 9y ago
I just read that article: it was super interesting. The author there found that many people recommend using cookies over web storage -- that's actually the exact opposite of the advice I've seen. This was written a few years ago,
147.
by rdegges 9y ago
At first glance looks like another competitor for filecoin, storj, etc. Anyone know what the major differences are in the players in this space currently? I'm interested in decentralized storage (low cost), but really have no idea how
148.
Building Real-Time Analytics Dashboards with Postgres and Citus(citusdata.com)
14 points by rdegges 9y ago|0 comments
149.
Three Developer Tools I'm Thankful For(developer.okta.com)
13 points by rdegges 9y ago|0 comments
150.
Tour of Postgres Index Types(citusdata.com)
6 points by rdegges 9y ago|0 comments

More ›