Pinned
#VALORANT 2023 clips 🧵
DevOps Rob
@devops_rob
1/2 of @keepinitsecure Podcast | Tech Hacker @HashiCorp | Game Player | linktr.ee/devopsrob | Tweets are my own views 🇬🇭
- Anyone else having trouble with the @digitalocean cloud control panel not loading properly? No side nav menu and a “Looks like something went wrong” message but status page says all is well. #ItIsNot
- @SheeenKelly happy bday. I logged into twitter just to send this. Hope you have a wonderful day. The Mrs sends her bday wishes too
- This is why I used Vault as an OIDC provider for my application. I have a write here for more implementation details hashicorp.com/blog/configuri…Replying to @VoxelPrismatic and @forgebitzHandling your own user Authentication can be a lot of work, storing creds in the DB ,hashing and salting etc …with things like OIDC/OAuth2 you don’t have to store user login creds and handle Authentication , you can just rely on the “big” tech companies to take care of it .
- I literally just did this for the first time last week. I generate state and add it to the state param in the redirect url and also stored it in a redis. Then I do state validation on the callback function comparing the returned state to the one in redis, rejecting it if no matchReplying to @forgebitzYour code doesn’t seem to be performing any state validation, meaning you’re open to CSRF attacks
