Load 28

Writing on code & systems.

Alla11yagileaiarchitectureauthenticationawsbmadbrowsercacheclaudecompilercomponentcontextcookiecsrfcssdata-modelingdata-structuredatabasedesign-systemdeveloper-toolsdevelopmentdnsdxeffecteffect-tsenterpriseentireeslintfiberfido2functionfunctional programmingfunctional-programminggenericgitgraphqlgrpci18njavascriptloadingmathnext.jsnitrooauthoptimizationpasskeyperformancepnpmprotobufqueryqwikreactreconciliationredisrefactoringreflectionremixrenderingrscrustschemasecurityserverside-projectspec-drivenssrstreamingtanstacktanstack-querytestingtokiotype-systemtypescriptunicodeunjsuxvalidationvanilla-extractwebauthnwebsocketxssyarnzod
oauth2 postsโœ•
2026
Latest
2026.02.17ยท10 min read

OAuth Deep Dive

OAuth 2.0 ์ด์ „์—๋Š” ์ œ3์ž ์•ฑ์ด ์‚ฌ์šฉ์ž์˜ ๋ฆฌ์†Œ์Šค์— ์ ‘๊ทผํ•˜๊ธฐ ์œ„ํ•œ ํ‘œ์ค€ ์œ„์ž„ ํ”„๋กœํ† ์ฝœ์ด ์—†์—ˆ์Šต๋‹ˆ๋‹ค. 2006~2007๋…„๊ฒฝ Twitter API๋ฅผ ์—ฐ๋™ํ•˜๋Š” ์„œ๋“œํŒŒํ‹ฐ ํด๋ผ์ด์–ธํŠธ๋“ค์€ ์‚ฌ์šฉ์ž์˜ Twitter ์•„์ด๋””์™€ ๋น„๋ฐ€๋ฒˆํ˜ธ๋ฅผ ์ง์ ‘ ์ž…๋ ฅ๋ฐ›์•„ ์ €์žฅํ•˜๋Š”โ€ฆ

02.16

Cookie Deep Dive

์ฟ ํ‚ค์™€ JavaScript ๋ฉ”๋ชจ๋ฆฌ๋Š” ํ† ํฐ ์ €์žฅ์†Œ๋กœ์„œ ๋ณด์•ˆ ํŠน์„ฑ์ด ๋‹ค๋ฆ…๋‹ˆ๋‹ค. ์ฟ ํ‚ค๋Š” ์ž๋™ ์ „์†ก๋˜์–ด CSRF์— ๋…ธ์ถœ๋˜๊ณ , ๋ฉ”๋ชจ๋ฆฌ๋Š” JavaScript๋กœ ์ ‘๊ทผ ๊ฐ€๋Šฅํ•ด XSS์— ๋…ธ์ถœ๋ฉ๋‹ˆ๋‹ค. ๊ฐ ์œ„ํ˜‘์˜ ๊ตฌ์กฐ์™€ ๋ฐฉ์–ด ์ˆ˜๋‹จ์„ ์ •๋ฆฌํ•ฉ๋‹ˆ๋‹ค.

securitycookiecsrfxssoauthenterprise10 min
โ†’
๋ชจ๋“  ๊ธ€์„ ์ฝ์œผ์…จ์Šต๋‹ˆ๋‹ค โœฆ