Breaking GitHub Private Pages for $35k

This page summarizes the projects mentioned and recommended in the original post on news.ycombinator.com
openid-connect Oauth2 .NET aspnet-core Security

InfluxDB - Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
featured
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
featured

  • IdentityServer4

    Discontinued OpenID Connect and OAuth 2.0 Framework for ASP.NET Core

    • Is there a technical reason why Microsoft doesn’t use IdentityServer4 with its implementation of the OpenId Connect and Oauth2 technologies. https://github.com/IdentityServer/IdentityServer4. They seem to be pushing it quite hard in Visual Studio and it appears to be designed for this very use case (cross domain authentication). Or do even they think it’s too overkill for GitHub ;)

  • lua-nginx-module

    Embed the Power of Lua into NGINX HTTP servers

    • - You should check for case sensitivity when reading `__Host` prefixed cookies, and verify the values against your expected format. It's possible for both `__HOST-Foo` and `__Host-Foo` cookies to exist, and only the `__Host` prefix requires the `Secure` and `HttpOnly` attributes [2]. In our case we strip all cookies at the edge using Varnish (VCL) to ensure no user-supplied cookies make it to our origin, and now we also ignore any "Secure" cookies that don't appear to have been set by our servers.

    [1]: https://github.com/openresty/lua-nginx-module/pull/1654

    [2]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Se...

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts

  • Enforcing single user session IDS4

    1 project | /r/u_zaibuf | 12 May 2023

  • Understanding JWT Tokens

    1 project | /r/csharp | 26 Feb 2023

  • Am I understanding OIDC Authorization Code Flow right?

    1 project | /r/csharp | 22 Feb 2023

  • Do i need a paid Duende IdentityServer license?

    1 project | /r/dotnet | 15 Jan 2023

  • What is the easiest way to add api authorization for a single non-human consumer?

    1 project | /r/dotnet | 16 Dec 2022