security 20
- SSO Series Part 10: Audit Logging & Compliance | SSO 系列之十:審計日誌與合規
- SSO Series Part 9: Multi-Tenant SSO Architecture | SSO 系列之九:多租戶 SSO 架構
- SSO Series Part 8: Certificate Rotation & Key Management | SSO 系列之八:證書輪換與金鑰管理
- SSO Series Part 5: SAML 2.0 Integration & Assertion Processing | SSO 系列之五:SAML 2.0 整合與 Assertion 處理
- SSO Series Part 4: OIDC Callback Processing & ID Token Verification | SSO 系列之四:OIDC 回調處理與 ID Token 驗證
- SSO Series Part 3: User Matching and The ENFORCED Linking Architecture | SSO 系列之三:用戶匹配與強制連結架構
- SSO Series Part 1: Enterprise Architecture, Protocol Deep Dive, and Security Foundations | SSO 系列之一:企業級架構、協定深度解析與保安基礎
- TOTP Series Part 10: The Ultimate Enterprise Review, Security Patterns, and Production Best Practices | TOTP 系列之十:企業級終極回顧、安全模式與生產環境最佳實踐
- TOTP Series Part 9: Admin UX Psychology, Danger Zones, and Permission-Based UI Rendering | TOTP 系列之九:管理員 UX 心理學、危險區域與基於權限的 UI 渲染
- TOTP Series Part 8: The Self-Service Reset Flow, Sudo-Mode Guards, and Password Brute-Force Prevention | TOTP 系列之八:自助重置流程、Sudo 模式守衛與防禦密碼暴力破解
- TOTP Series Part 7: The Partial Authentication Pattern, React Router Guards, and Axios Interceptors | TOTP 系列之七:部分驗證模式、React Router 守衛與 Axios 攔截器
- TOTP Series Part 5: Architecting Admin Reset APIs, RBAC, and Asynchronous Global Migrations | TOTP 系列之五:建構 Admin Reset API、RBAC 與非同步全局遷移
- TOTP Series Part 4: Defeating Replay Attacks, Mitigating Clock Drift, and Redis LUA Scripts | TOTP 系列之四:擊破重放攻擊、化解時間漂移與 Redis LUA 腳本
- TOTP Series Part 3: The Definitive Guide to KEK Rotation, NIST Compliance, and Memory Management | TOTP 系列之三:KEK 輪換、NIST 合規與記憶體管理的終極指南
- TOTP Series Part 2: The Definitive Guide to Backend Architecture, Envelope Encryption, and TypeORM Design | TOTP 系列之二:後端架構、信封加密技術與 TypeORM 設計的終極指南
- TOTP Series Part 1: The Ultimate Evolution of Authentication, RFC Standards, and System Design Patterns | TOTP 系列之一:終極驗證技術演變、RFC 標準與系統設計模式
- AES-256 All Modes Explained: From ECB to GCM | AES-256 各模式詳解:從 ECB 到 GCM
- Encryption and Hashing Explained: The Foundations of Modern Security | 加密同雜湊拆解:現代安全嘅基礎原理
- What are TOTP and HOTP? The Principles Behind One-Time Password Algorithms | TOTP、HOTP 究竟係啲咩? —— 一次性密碼認證算法背後嘅原理
- Two-Factor Authentication (2FA) Explained: Why One Password Isn't Enough | 雙重認證 (2FA) 係咩?點解淨係靠密碼唔夠安全