Lightnews — Scholar-powered news

Emelia

@thisismissem.social

Might try tomorrow to implement ES256k support in jwt-cli, because that's one of my biggest annoyances when working with AT Protocol PDS access tokens atm.

github.com/mike-engel/j...

Looks like the upstream change shouldn't be _too_ hard (famous last words?)

Missing "alg": "ES256K" · Issue #402 · mike-engel/jwt-cli

Missing "alg": "ES256K" jwt error The JWT provided is invalid because JSON error: unknown variant ES256K, expected one of HS256, HS384, HS512, ES256, ES384, RS256, RS384, RS512, PS256, PS384, PS512...

github.com

November 9, 2025 at 7:27 AM

)(nandi)(

@nandi.craves.food

@cosmik.network would be cool if I could share links to semble via android chrome developer.chrome.com/docs/capabil... I created a little proxy PWA in the meantime that posts stuff using a hard coded JWT in secrets

Receiving shared data with the Web Share Target API | Capabilities | Chrome for Developers

On a mobile or desktop device, sharing should be as simple as clicking the Share button, choosing an app, then choosing who to share with. The Web Share Target API allows installed web apps to registe...

developer.chrome.com

November 8, 2025 at 3:59 PM

Acquaint Softtech

@acquaintsofttech.bsky.social

Master JWT Authentication in the MERN Stack - from setup to secure token rotation. Learn how to protect your app with short-lived access tokens, HttpOnly cookies, and refresh flow done right. Learn more:
www.linkedin.com/pulse/beginn...

#mern #jwt #websecurity #nodejs #reactjs #fullstackdev

Beginner’s Guide: JWT Authentication Flow in MERN Stack

Introduction You will implement JWT authentication MERN stack end-to-end. You will create a Node.

www.linkedin.com

November 7, 2025 at 5:49 AM

Fabien Meurillon

@fabien.meurillon.org

ça dépend du workflow, le `sub` fais plutôt référence à l'utilisateur authentifié qu'à l'application qui s'identifie avec l'API key. JWT permet de packager les deux infos, si les middleware font le tri en backend.

November 7, 2025 at 1:52 PM

Julien Wittouck

@codeka.io

Les devs connaissent bien les types `Basic` et `Bearer` pour les authentification login/password et les fameux tokens JWT 👍

Mais on doit toujours passer les clés d'API avec des headers custom moisis comme
`X-Api-Key: xxxxx` ou `PRIVATE-TOKEN: xxxx`.

RFC 9110: HTTP Semantics

The Hypertext Transfer Protocol (HTTP) is a stateless application-level protocol for distributed, collaborative, hypertext information systems. This document describes the overall architecture of…

www.rfc-editor.org

November 7, 2025 at 8:06 AM

Dr. Molly

@spoudogeloios.bsky.social

JWT has shown his hand here: it was never about reading old books well. It was, and is, about money and power.

Annie Abrams @annieabrams.bsky.social · 9d

See also Jeremy Wayne Tate, founder of the Classic Learning Test, who recently argued, “In a word, using AI trains users to become wise.” www.dailysignal.com/2025/08/01/a...

AI Is Making Us Wiser. Just Ask Socrates.

A recent article discusses how AI may reduce certain types of intelligence but can enhance wisdom by prompting users to ask better questions.

www.dailysignal.com

November 3, 2025 at 4:25 PM

Damien Bowden

@damienbod.com

Blogged: Implement a secure MCP server using OAuth DPoP and Duende identity provider

damienbod.com/2025/11/03/i...

#aspnetcore #mcp #llm #duende #openidconnect #oidc #oauth #dpop #jwt #openai #ai

Implement a secure MCP server using OAuth DPoP and Duende identity provider

Code: This post demonstrates how an ASP.NET Core application can connect to a secure MCP server using OpenID Connect and OAuth. Both applications use Duende IdentityServer as the identity provider.…

damienbod.com

November 3, 2025 at 6:49 AM

Francis

@franallan.bsky.social

Another fact ,, Musk and the White House now Control any and all info on Atlas 3 I ,, not NASA ,, best bet for real info is probably ESA ,, or Brits ,, or the Billionaire Benefactor who Funded JWT years back in England . 😉😉😉👍🛸👽🏴󠁧󠁢󠁳󠁣󠁴󠁿

October 29, 2025 at 2:27 PM

Francis

@franallan.bsky.social

And it’s probably worth Trillions in Exotic Minerals,, that nobody can get to including that asshole Musk ,, the Russians and Chinese are into it as others ,, in fact the UK had the funding in the first place for JWT ,, so the Brits are sitting with the Data and being quiet,, 😉👍🛸👽🏴󠁧󠁢󠁳󠁣󠁴󠁿

October 29, 2025 at 2:08 PM

GhibliMagic / Janet

@ghiblimagic.bsky.social

256-257 #100daysofcode
🍀 Contact form w/ reCaptcha
🍀 Added honeypot & timeout to magiclink form
🍀 added loading spinner to forms
🍀 fixed cloudinary logic for avatar uploads, reload jwt so their profile image updates
🍀 filled out footer
🍀 bug fixes
🎉 up to 1445 names!

October 23, 2025 at 8:37 AM

kripta.biz

@kriptabiz.bsky.social

Ассиметричные JWT в Supabase Auth: Как обеспечить безопасность и масштабируемость вашего приложения

https://kripta.biz/posts/8304B73A-2E3A-4370-A0BB-89048F053756

October 20, 2025 at 4:44 PM

mary🐇

@mary.my.id

so long as you hold the keys to your identity you should be able to optionally swap the atproto verificationMethod and then craft a service JWT to createAccount

October 19, 2025 at 9:14 AM

I suggest selfcest

@isuggest.selfce.st

no one got it right btw the whole thing is a spawn of Satan because I'm storing an inter service JWT as a react hook lmao

I suggest selfcest @isuggest.selfce.st · 25d

who can tell me what's wrong with this piece of code

export const useIsaJwt = () => {
const agent = useOAuthAgent();
const session = useOAuthSession();
const { data, error, isPending } = useQuery({
queryKey: ["isa-jwt"],
queryFn: async () => {
return await requestIsaJwt({ agent, session });
},
});
if (error)
throw new Error(
`something went wrong when trying to request the inter-service JWT ${JSON.stringify(error)}`,
);
return { data, isPending };
};

October 18, 2025 at 4:08 PM

I suggest selfcest

@isuggest.selfce.st

who can tell me what's wrong with this piece of code

October 17, 2025 at 6:38 PM

isabel

@isabelroses.com

your making a isabel jwt

October 17, 2025 at 7:07 PM

I suggest selfcest

@isuggest.selfce.st

how does the receiving service verify the jwt tho

October 16, 2025 at 5:08 PM

History of Advertising Trust

@historyofads.bsky.social

Another in the series can be seen here: www.hatads.org.uk/catalogue/re...
Agency: J Walter Thompson (JWT)
Advertiser / Client: Brooke Bond Oxo
Director: Terry Hughes
Production Company: James Garret & Ptnrs Ltd
Art Director: Tony Tonkin
Copywriter: Geoff Weedon

October 15, 2025 at 8:20 AM

Siva

@sivalabs.in

Here is the first episode of "Review Buddy Program"

EP01 - Code Review of Spring Boot REST API with JWT Authentication

www.youtube.com/watch?v=dIMf...

#Java #SpringBoot #BestPractices #CodeReview

Code Review Buddy | EP01 - Review Spring Boot REST API

YouTube video by SivaLabs

www.youtube.com

October 13, 2025 at 4:54 AM

Perfect storm

@hikkifox.bsky.social

Короче, мені в понеділок треба буде запилити скрипи на Сайпресі, для тестування jwt авторизації.

Що Сайпреса, що джс я не дуже знаю

Вибив собі на це два дні

October 11, 2025 at 10:59 PM

Wam

@wamwoowam.co.uk

auth protocol that prompts an llm with "does this jwt smell valid to you: %s" + a sentiment analyser w/ .5 threshold

October 10, 2025 at 6:55 PM

teq 'r treat

@quilling.dev

claude I have your family now refresh my jwt token or else

October 10, 2025 at 5:01 AM

HotSocket Skeeter '25

@hotsocket.fyi

me when i finally get a proper jwt out of my code

October 9, 2025 at 3:32 AM

finxol

@finxol.io

i had a similar issue, it was because of system time on my pds.. The time was off by a few dozen seconds, so the jwt timestamps were off too and a lot of atproto apps wouldn’t accept it.
Fixing system time with chrony did it

September 27, 2025 at 11:05 PM