Category: Security
-
OIDC Large Headers – How to conquer 400 errors
When implementing OpenID Connect (OIDC) for authentication, especially in modern distributed systems, large request headers can become a significant issue. OIDC tokens, particularly JWT (JSON Web Tokens), often contain large amounts of user data, roles, claims, and metadata, all of which are transmitted via HTTP headers. This leads to potential…
-
Throttling and the Proxy: How to Securely Throttle Traffic
IP-based throttling is a common method used to control traffic, prevent abuse, and maintain service stability. However, this becomes complicated when proxies, load balancers, or other intermediaries are involved. In such cases, relying solely on the request’s originating IP may not be sufficient, as client IPs can be hidden behind…
-
HTTP Headers: Not Just Metadata, Your Security Shield
HTTP (Hypertext Transfer Protocol) serves as the foundation of data communication across the web. HTTP headers are an integral part of this protocol, providing essential metadata within HTTP requests and responses. These headers transmit information about the client, the server, the requested resource, and the desired handling of the request.…
-
Input Validation in Microservices: Know how to secure the gates
In the world of microservices, the shift from traditional monolithic applications brings increased complexity to input validation. Microservices must rigorously validate data at every entry point, considering both client mistakes and malicious intent. This approach acts as a shield against attacks and safeguards data integrity, reputation, and user trust.