ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
When GitLab users can’t authenticate via LDAP, the problem is usually a configuration or network issue. This guide walks through a diagnostic table, step‑by‑step checks, fixes, and escalation paths for GitLab 13‑16.
Treat LinkedIn Sign In as standard OpenID Connect, not a permanent access token. Verify the ID token, key accounts by sub, and handle missing email gracefully.
Attaching auth middleware in AdonisJS v5 is not enough; you must bind an explicit guard to each route group or unauthenticated requests can reach your controllers.
PKCE lets public clients like SPAs authenticate Twitter users without storing secrets. This post walks through the OAuth 2.0 Authorization Code Flow with PKCE for API v2, including authorization URL construction, token exchange, refresh rotation, and the practical limits you'll hit in production.
Moving JWT validation to Netlify Edge Functions can cut 100-200ms per authenticated request, but only if your auth logic fits within V8 isolate constraints: 50MB bundle, 100ms init, no filesystem, Web Crypto API only. A concrete RS256 validation example shows the trade-offs.
Learn how to use the Strategy pattern in Passport.js to support multiple identity providers while maintaining a unified user session and secure database integration.
Supabase Row Level Security uses Postgres native RLS with auth.uid() to scope rows to authenticated users. Enable RLS, write policies matching user_id = auth.uid(), and verify with real JWTs — but watch for default-deny lockout, service_role bypass, and table owner exceptions.
Passport.js sessions can balloon if you store the whole user profile. This blog explains why keeping the session tiny—by serializing only an ID—matters, how to order middleware correctly, and the trade‑off of a per‑request database lookup.
Move Dovecot authentication from local files to LDAP with a step‑by‑step guide. Learn how to configure the ldap_passwd scheme, secure credentials, enable caching, and verify the setup in production.
gitlab
linkedin
adonisjs
netlify
passport
supabase
nodejs
dovecot