ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
Credential Lifecycle Management Argo CD implements least-privilege access by mapping external identity provider groups to internal roles via RBAC policies. For OIDC-based authentication, the API server validates the exp claim on every request, resulting in an HTTP 401 response once the token expires, which necessitates a client-side re-authentication flow. S
We run Qodana linters in CI and upload results to Qodana Cloud using the QODANA_TOKEN environment variable, one project token per pipeline. The token is stored as a CI secret, and I want to settle on a credential policy before rolling this out to more repositories. The trade-off I cannot resolve from the documentation alone: a long-lived project token is ope
Request Propagation in Passport.js Passport v0.5.0 formally documented the passReqToCallback option, allowing the request object to be passed as the first argument to the verify callback. While previously associated primarily with the strategy constructor, this functionality was extended to passport.authenticate to support more dynamic configurations. Config
Authentication State in Data APIs When implementing least-privilege access in React Router v6+, developers often use loaders to validate credentials before a route renders. A common design challenge arises when a loader encounters an expired token or a 401 Unauthorized response from a backend API during the pre-render phase. Handling Expired Credentials Ther
PyPI implements scoped API tokens to facilitate least-privilege access, allowing automated tools like twine to upload packages to specific projects without requiring global account credentials. This mechanism reduces the impact of a credential leak by limiting the token's scope to a subset of the user's projects. While tokens can be manually revoked via the
Credential Handling in Modern Browser Drivers Historically, Selenium WebDriver users handled HTTP Basic Authentication by embedding credentials directly into the target URL (e.g., http://user:password@host ). However, modern Chromium-based browsers have deprecated this format due to security concerns, often ignoring the credentials or blocking the request en
The goal is to confirm whether a password change for a local Portainer user, performed through the API endpoint /api/users/{id}/password, becomes effective for subsequent authentication requests without restarting the Portainer container, or whether the change only takes effect after a container restart. Current observations show that the UI appears to apply
Goal: Use d3.json to fetch JSON data from an API that requires a scoped bearer token for least‑privilege access, while ensuring that expired credentials are handled without exposing the token to unrelated parts of the application. Constraint: d3.json (and related loaders) accept only a URL and an optional callback, and they internally call fetch(url) or XMLH
SSH Agent Forwarding allows a client to use local private keys for authentication on a remote server, enabling subsequent jumps to other hosts without storing sensitive keys on intermediate servers. This mechanism relies on the creation of a Unix domain socket on the remote host to communicate back to the local ssh-agent. While this simplifies multi-hop work
qodana
nodejs
passport
pypi
d3js
ssh
argocd