Fosstodon

HabrПутеводитель по Ktor JWT auth на стороне сервераДокументация Ktor по server-jwt неполна. Если необходимо сделать что-то за рамками «Hello world», придется лезть в исходники и городить костыли. Какой-то консистентности и предсказуемости ждать не стоит, возможно, не обошлось без заговорщиков . Статья покроет необходимую базу для работы с JWT и убережет от множества подводных камней.<a href="https://habr.com/ru/articles/921076/" rel="nofollow noopener" translate="no" target="_blank">https://habr.com/ru/articles/921076/</a><a href="https://zhub.link/tags/ktor" class="mention hashtag" rel="nofollow noopener" target="_blank">#ktor</a> <a href="https://zhub.link/tags/backend" class="mention hashtag" rel="nofollow noopener" target="_blank">#backend</a> <a href="https://zhub.link/tags/kotlin" class="mention hashtag" rel="nofollow noopener" target="_blank">#kotlin</a> <a href="https://zhub.link/tags/jwt_auth" class="mention hashtag" rel="nofollow noopener" target="_blank">#jwt_auth</a> <a href="https://zhub.link/tags/%D0%B3%D0%BE%D0%B2%D0%BD%D0%BE%D0%BA%D0%BE%D0%B4" class="mention hashtag" rel="nofollow noopener" target="_blank">#говнокод</a> <a href="https://zhub.link/tags/%D0%B0%D0%B2%D1%82%D0%BE%D1%80%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D1%8F" class="mention hashtag" rel="nofollow noopener" target="_blank">#авторизация</a> <a href="https://zhub.link/tags/%D0%B0%D1%83%D1%82%D0%B5%D0%BD%D1%82%D0%B8%D1%84%D0%B8%D0%BA%D0%B0%D1%86%D0%B8%D1%8F" class="mention hashtag" rel="nofollow noopener" target="_blank">#аутентификация</a> <a href="https://zhub.link/tags/%D0%BA%D0%BE%D1%81%D1%82%D1%8B%D0%BB%D0%B8" class="mention hashtag" rel="nofollow noopener" target="_blank">#костыли</a> <a href="https://zhub.link/tags/authorization" class="mention hashtag" rel="nofollow noopener" target="_blank">#authorization</a> <a href="https://zhub.link/tags/authentication" class="mention hashtag" rel="nofollow noopener" target="_blank">#authentication</a>

MariuszDay 7 ✅ 24 test suites, 153 tests passing.Solid coverage across service and controller layers in my modular monorepo. Strict typing (TypeScript), full DTO validation, and realistic mocks across complex relations (TypeORM).Next: fine-tuning error handling & exploring e2e strategies.<a href="https://write.as/bmariusz/24-test-suites-153-tests-passing-scaling-confidence-with-every-assertion" rel="nofollow noopener" translate="no" target="_blank">https://write.as/bmariusz/24-test-suites-153-tests-passing-scaling-confidence-with-every-assertion</a><a href="https://techhub.social/tags/TypeScript" class="mention hashtag" rel="nofollow noopener" target="_blank">#TypeScript</a> <a href="https://techhub.social/tags/NestJS" class="mention hashtag" rel="nofollow noopener" target="_blank">#NestJS</a> <a href="https://techhub.social/tags/Nextjs" class="mention hashtag" rel="nofollow noopener" target="_blank">#Nextjs</a> <a href="https://techhub.social/tags/InsuranceTech" class="mention hashtag" rel="nofollow noopener" target="_blank">#InsuranceTech</a> <a href="https://techhub.social/tags/Microservices" class="mention hashtag" rel="nofollow noopener" target="_blank">#Microservices</a> <a href="https://techhub.social/tags/monorepo" class="mention hashtag" rel="nofollow noopener" target="_blank">#monorepo</a> <a href="https://techhub.social/tags/rbac" class="mention hashtag" rel="nofollow noopener" target="_blank">#rbac</a> <a href="https://techhub.social/tags/codingdays" class="mention hashtag" rel="nofollow noopener" target="_blank">#codingdays</a> <a href="https://techhub.social/tags/swagger" class="mention hashtag" rel="nofollow noopener" target="_blank">#swagger</a> <a href="https://techhub.social/tags/jwt" class="mention hashtag" rel="nofollow noopener" target="_blank">#jwt</a> <a href="https://techhub.social/tags/jwt_auth" class="mention hashtag" rel="nofollow noopener" target="_blank">#jwt_auth</a> <a href="https://techhub.social/tags/programming" class="mention hashtag" rel="nofollow noopener" target="_blank">#programming</a>

MariuszDay 6 TL;DR: Groups, memberships, hierarchy — all dynamic now.Released backend v0.3.0 🎉✅ Users can belong to multiple groups with typed roles ✅ Groups can form hierarchical or overlapping structures ✅ Roles are normalized via reference typesBuilt with NestJS + TypeORM. Documented via Swagger.<a href="https://write.as/bmariusz/building-a-flexible-group-structure-with-nestjs-and-typeorm" rel="nofollow noopener" translate="no" target="_blank">https://write.as/bmariusz/building-a-flexible-group-structure-with-nestjs-and-typeorm</a><a href="https://techhub.social/tags/TypeScript" class="mention hashtag" rel="nofollow noopener" target="_blank">#TypeScript</a> <a href="https://techhub.social/tags/NestJS" class="mention hashtag" rel="nofollow noopener" target="_blank">#NestJS</a> <a href="https://techhub.social/tags/Nextjs" class="mention hashtag" rel="nofollow noopener" target="_blank">#Nextjs</a> <a href="https://techhub.social/tags/InsuranceTech" class="mention hashtag" rel="nofollow noopener" target="_blank">#InsuranceTech</a> <a href="https://techhub.social/tags/Microservices" class="mention hashtag" rel="nofollow noopener" target="_blank">#Microservices</a> <a href="https://techhub.social/tags/monorepo" class="mention hashtag" rel="nofollow noopener" target="_blank">#monorepo</a> <a href="https://techhub.social/tags/rbac" class="mention hashtag" rel="nofollow noopener" target="_blank">#rbac</a> <a href="https://techhub.social/tags/codingdays" class="mention hashtag" rel="nofollow noopener" target="_blank">#codingdays</a> <a href="https://techhub.social/tags/swagger" class="mention hashtag" rel="nofollow noopener" target="_blank">#swagger</a> <a href="https://techhub.social/tags/jwt" class="mention hashtag" rel="nofollow noopener" target="_blank">#jwt</a> <a href="https://techhub.social/tags/jwt_auth" class="mention hashtag" rel="nofollow noopener" target="_blank">#jwt_auth</a> <a href="https://techhub.social/tags/programming" class="mention hashtag" rel="nofollow noopener" target="_blank">#programming</a>

MariuszDay 5 TL;DR: Continued work on backend security — role-based access is now fully wired up.✅ Got fine-grained role-based access control fully working today.• Roles loaded from PostgreSQL • Injected into JWT during login • Validated via custom `@Roles()` + `RolesGuard` • Authenticated via `@UseGuards(JwtAuthGuard)` globally • Introduced `@Public()` decorator to bypass guards for public endpoints • Swagger supports Bearer token for testing Took a while to get the role propagation into the token right — the key was enriching the `validateUser()` result, not just fetching data from DB.Modular, clean, and no magic. Feels good. 👌more on: <a href="https://write.as/bmariusz/continuation-securing-routes-with-jwt-and-role-based-access-control" rel="nofollow noopener" translate="no" target="_blank">https://write.as/bmariusz/continuation-securing-routes-with-jwt-and-role-based-access-control</a> <a href="https://techhub.social/tags/CloudNative" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudNative</a> <a href="https://techhub.social/tags/TypeScript" class="mention hashtag" rel="nofollow noopener" target="_blank">#TypeScript</a> <a href="https://techhub.social/tags/NestJS" class="mention hashtag" rel="nofollow noopener" target="_blank">#NestJS</a> <a href="https://techhub.social/tags/Nextjs" class="mention hashtag" rel="nofollow noopener" target="_blank">#Nextjs</a> <a href="https://techhub.social/tags/InsuranceTech" class="mention hashtag" rel="nofollow noopener" target="_blank">#InsuranceTech</a> <a href="https://techhub.social/tags/Microservices" class="mention hashtag" rel="nofollow noopener" target="_blank">#Microservices</a> <a href="https://techhub.social/tags/monorepo" class="mention hashtag" rel="nofollow noopener" target="_blank">#monorepo</a> <a href="https://techhub.social/tags/codingdays" class="mention hashtag" rel="nofollow noopener" target="_blank">#codingdays</a> <a href="https://techhub.social/tags/swagger" class="mention hashtag" rel="nofollow noopener" target="_blank">#swagger</a> <a href="https://techhub.social/tags/jwt" class="mention hashtag" rel="nofollow noopener" target="_blank">#jwt</a> <a href="https://techhub.social/tags/jwt_auth" class="mention hashtag" rel="nofollow noopener" target="_blank">#jwt_auth</a> <a href="https://techhub.social/tags/programming" class="mention hashtag" rel="nofollow noopener" target="_blank">#programming</a>

MariuszDay 4TL;DR: Full Swagger docs + JWT auth with registration and login are live.Today’s work focused on two key improvements.1. Swagger documentation was extended across all API layers. DTOs, entities, and controllers were enriched with `@ApiTags`, `@ApiOperation`, `@ApiResponse`, and detailed `@ApiBody` annotations — including real-life examples for request bodies.2. JWT-based authentication was implemented. A secure registration flow was added, with password hashing via bcrypt. A login endpoint now issues access tokens containing user ID, email, and roles. All logic is encapsulated using Passport strategies (local and JWT). The next step will be protecting routes with guards and role-based access.<a href="https://techhub.social/tags/CloudNative" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudNative</a> <a href="https://techhub.social/tags/TypeScript" class="mention hashtag" rel="nofollow noopener" target="_blank">#TypeScript</a> <a href="https://techhub.social/tags/NestJS" class="mention hashtag" rel="nofollow noopener" target="_blank">#NestJS</a> <a href="https://techhub.social/tags/Nextjs" class="mention hashtag" rel="nofollow noopener" target="_blank">#Nextjs</a> <a href="https://techhub.social/tags/InsuranceTech" class="mention hashtag" rel="nofollow noopener" target="_blank">#InsuranceTech</a> <a href="https://techhub.social/tags/Microservices" class="mention hashtag" rel="nofollow noopener" target="_blank">#Microservices</a> <a href="https://techhub.social/tags/monorepo" class="mention hashtag" rel="nofollow noopener" target="_blank">#monorepo</a> <a href="https://techhub.social/tags/codingdays" class="mention hashtag" rel="nofollow noopener" target="_blank">#codingdays</a> <a href="https://techhub.social/tags/swagger" class="mention hashtag" rel="nofollow noopener" target="_blank">#swagger</a> <a href="https://techhub.social/tags/jwt" class="mention hashtag" rel="nofollow noopener" target="_blank">#jwt</a> <a href="https://techhub.social/tags/jwt_auth" class="mention hashtag" rel="nofollow noopener" target="_blank">#jwt_auth</a> <a href="https://techhub.social/tags/programming" class="mention hashtag" rel="nofollow noopener" target="_blank">#programming</a>

HabrПочему JWT — не панацея: разбор проблем сессий и безопасностиJWT для сессий: удобство или головная боль? JSON Web Token (JWT) приобрёл популярность как удобный способ аутентификации и передачи данных между клиентом и сервером. Его ценят за простоту , stateless-подход и гибкость . Однако большинство гайдов рассказывают только о плюсах, забывая о недостатках . В этой статье мы разберём основные проблемы использования JWT для хранения пользовательских сессий и обсудим более надёжные альтернативы.<a href="https://habr.com/ru/articles/884912/" rel="nofollow noopener" translate="no" target="_blank">https://habr.com/ru/articles/884912/</a><a href="https://zhub.link/tags/jwt" class="mention hashtag" rel="nofollow noopener" target="_blank">#jwt</a> <a href="https://zhub.link/tags/jwt_auth" class="mention hashtag" rel="nofollow noopener" target="_blank">#jwt_auth</a> <a href="https://zhub.link/tags/json_web_token" class="mention hashtag" rel="nofollow noopener" target="_blank">#json_web_token</a> <a href="https://zhub.link/tags/%D1%81%D0%B5%D1%81%D1%81%D0%B8%D0%B8" class="mention hashtag" rel="nofollow noopener" target="_blank">#сессии</a> <a href="https://zhub.link/tags/refresh%D1%82%D0%BE%D0%BA%D0%B5%D0%BD%D1%8B" class="mention hashtag" rel="nofollow noopener" target="_blank">#refreshтокены</a> <a href="https://zhub.link/tags/redis" class="mention hashtag" rel="nofollow noopener" target="_blank">#redis</a> <a href="https://zhub.link/tags/api" class="mention hashtag" rel="nofollow noopener" target="_blank">#api</a>

HabrМой вариант аутентификации с помощью JWT в FastAPI + ReactДрузья, приветствую! В создании своих pet проектов часто возникает задача аутентификации пользователя. Это может быть связано с персональным отображением страниц, настройки доступа и т.д. В этой статье я хочу показать свое решение с помощью Python,FastApI и React.<a href="https://habr.com/ru/articles/846826/" rel="nofollow noopener" translate="no" target="_blank">https://habr.com/ru/articles/846826/</a><a href="https://zhub.link/tags/python" class="mention hashtag" rel="nofollow noopener" target="_blank">#python</a> <a href="https://zhub.link/tags/fastapi" class="mention hashtag" rel="nofollow noopener" target="_blank">#fastapi</a> <a href="https://zhub.link/tags/react" class="mention hashtag" rel="nofollow noopener" target="_blank">#react</a> <a href="https://zhub.link/tags/jwt" class="mention hashtag" rel="nofollow noopener" target="_blank">#jwt</a> <a href="https://zhub.link/tags/jwt_auth" class="mention hashtag" rel="nofollow noopener" target="_blank">#jwt_auth</a>

HabrJWT-аутентификация при помощи Spring Boot 3 и Spring Security 6Переход от базовых приложений к более сложным требует использования Spring Security для обеспечения безопасности. Новая версия, Spring Security 6, изменяет некоторые базовые реализации, а русскоязычных материалов на эту тему очень мало. В этой статье мы рассмотрим JWT-аутентификацию и авторизацию с помощью Spring Boot 3 и Spring Security 6, чтобы помочь начинающем разработчикам разобраться и начать пользоваться базовым функционалом этой библиотеки. Цель данной статьи - показать, как использовать JWT-аутентификацию с API-интерфейсами.<a href="https://habr.com/ru/articles/784508/" rel="nofollow noopener" translate="no" target="_blank">https://habr.com/ru/articles/784508/</a><a href="https://zhub.link/tags/spring" class="mention hashtag" rel="nofollow noopener" target="_blank">#spring</a> <a href="https://zhub.link/tags/spring_boot" class="mention hashtag" rel="nofollow noopener" target="_blank">#spring_boot</a> <a href="https://zhub.link/tags/spring_security" class="mention hashtag" rel="nofollow noopener" target="_blank">#spring_security</a> <a href="https://zhub.link/tags/jwt" class="mention hashtag" rel="nofollow noopener" target="_blank">#jwt</a> <a href="https://zhub.link/tags/jwt_auth" class="mention hashtag" rel="nofollow noopener" target="_blank">#jwt_auth</a> <a href="https://zhub.link/tags/bearer_tokens" class="mention hashtag" rel="nofollow noopener" target="_blank">#bearer_tokens</a>

Recent searches

Search options

Administered by:

Server stats:

#jwt_auth