DarkEdges - DEV Community

DarkEdges

Oct 4

Step-up MFA, attenuation, and what's honestly not done

#security #authorization #pingfederate #datalog

6 min read

DarkEdges

Oct 4

Configuring PingFederate token exchange with Terraform, and testing it end to end

#pingfederate #terraform #oauth #rust

6 min read

DarkEdges

Oct 4

Building a PingFederate token generator that mints Biscuits

#pingfederate #java #security #oauth

7 min read

DarkEdges

Oct 4

Who mints the first Biscuit? PingFederate, token exchange and a hybrid model

#pingfederate #oauth #security #authorization

6 min read

DarkEdges

Oct 4

Credits without a mutable token: reservations, idempotency and receipts

#security #javascript #distributedsystems #cloudflare

5 min read

DarkEdges

Oct 4

Local policy, shared facts: the receiver's Datalog authorizer

#security #authorization #datalog #javascript

4 min read

DarkEdges

Oct 4

Attenuating Biscuit tokens and signing the delegation chain

#security #authorization #javascript #webassembly

5 min read

DarkEdges

Oct 4

Delegating authority across companies with Biscuit tokens

#security #authorization #javascript #cloudflare

5 min read

DarkEdges

Oct 1

Run It, Deploy It, and What's Honestly Not Done Yet

#pingfederate #go #terraform #kubernetes

2 min read

DarkEdges

Oct 1

Securing the Token Vault: Encrypted State, Refresh Rotation and Safe Logs

#go #security #encryption #oauth

2 min read

DarkEdges

Oct 1

Introspection and Delegations: Authorising Agents Per User, Per Operation

#pingfederate #oauth #api #security

3 min read

DarkEdges

Oct 1

PingFederate as a Token Courier: Linking Entra with the Reference ID Adapter

#pingfederate #oauth #microsoft #security

2 min read

DarkEdges

Oct 1

Agents Should Never Hold Your Tokens: A PingFederate to Microsoft Graph Broker

#pingfederate #security #ai #go

1

3 min read

DarkEdges

Sep 7

Custom ID-JAG on PingFederate, Part 4: Testing Live Issuance Without Overclaiming

#testing #oauth #security #terraform

4 min read

DarkEdges

Sep 7

Custom ID-JAG on PingFederate, Part 3: Managing the Integration with Terraform

#terraform #devops #oauth #security

4 min read

DarkEdges

Sep 7

Custom ID-JAG on PingFederate, Part 2: Building the Generator and Handling Runtime Constraints

#java #oauth #security #identity

4 min read

DarkEdges

Sep 7

Custom ID-JAG on PingFederate, Part 1: Can PingFederate 12.3.3 Issue an ID-JAG?

#oauth #security #java #identity

4 min read

DarkEdges

Aug 30

Building One Tap for PingFederate, Part 3: An Automated Narrated Demo Video

#playwright #python #ai #devops

3 min read

DarkEdges

Aug 30

Building One Tap for PingFederate, Part 2: Docker, Terraform, and OIDC with PKCE

#terraform #docker #oidc #pingidentity

3 min read

DarkEdges

Aug 30

Building One Tap for PingFederate, Part 1: Architecture and the Secure Account Bridge

#pingidentity #oidc #authentication #architecture

5 min read

DarkEdges

Aug 23

Trusted AI Agent Transactions, Part 5: End-to-End Proof

#go #pingidentity #mcp #security

3 min read

DarkEdges

Aug 23

Trusted AI Agent Transactions, Part 4: PingAuthorize Policy Decisions

#pingauthorize #security #authorization #ai

2 min read

DarkEdges

Aug 23

Trusted AI Agent Transactions, Part 3: SPIRE Workload Identity

#spiffe #spire #security #ai

2 min read

DarkEdges

Aug 23

Trusted AI Agent Transactions, Part 2: PingFederate Token Exchange

#pingfederate #oauth #security #ai

5 min read

DarkEdges

Aug 23

Trusted AI Agent Transactions, Part 1: The Identity Problem

#security #oauth #ai #pingidentity

1

2 min read

DarkEdges

Aug 7

My detector caught the attacker and never once stopped it, and reported PASS

#security #debugging #testing #architecture

6 min read

DarkEdges

Aug 7

A graduated response ladder where every rung is invisible

#security #api #architecture #opa

6 min read

DarkEdges

Aug 7

Honeytokens that recognise themselves: stateless decoys with automatic attribution

#security #api #cryptography #architecture

5 min read

DarkEdges

Aug 7

Four ways a baseline quietly destroys the anomaly detector built on it

#security #machinelearning #debugging #architecture

5 min read

DarkEdges

Aug 7

Three detection layers that disagree usefully, and why they combine by max, not sum

#security #machinelearning #architecture #typescript

7 min read

DarkEdges

Aug 7

The most obvious signals for detecting enumeration don't work

#security #api #datascience #architecture

6 min read

DarkEdges

Aug 7

Simulating attackers is easy. Simulating legitimate users is the hard part

#security #api #testing #architecture

6 min read

DarkEdges

Aug 7

Your API is being enumerated by a client with a perfectly valid token

#security #api #architecture #typescript

1

5 min read

DarkEdges

Jul 29

Cross-App Access Without Leaking Credentials: A Hands-On ID-JAG POC

#oauth #security #springboot #nextjs

2 min read

DarkEdges

Jul 26

Proving Zero Trust Actually Works: Entra ID + Cloudflare Access over Both OIDC and SAML

#azure #terraform #security #cloudflare

5 min read

DarkEdges

Jul 7

From vexctl scripts to a governed VEX platform: building vex-ui with Next.js, keyless signing, and a Trivy-consumable repo

#security #nextjs #devops #supplychain

5 min read

DarkEdges

Jun 28

Building CIS-Hardened, SBOM-Attested CentOS 9 Golden Images with Packer, QEMU and PingAccess - entirely on WSL2

#devsecops #packer #supplychainsecurity #linux

6 min read

DarkEdges

Jun 13

VEX demo update: adding Docker Scout attestations (and three new gotchas)

#docker #security #devops #tutorial

5 min read

DarkEdges

Jun 13

From 70 CVEs to 0: a hands-on VEX suppression workflow with Trivy (and a path to Wiz)

#docker #security #devops #tutorial

5 min read

DarkEdges

May 27

Deploy Ping Identity Products on Kubernetes with a Single Operator

#kubernetes #pingidentity #operator #helm

6 min read

DarkEdges

Apr 29

From Laptop to Cluster: Running darkedges-entraid-tokenexchange with Docker and Kubernetes

#devops #docker #kubernetes #tutorial

4 min read

DarkEdges

Apr 20

PingFederate Token Exchange Processor Policy

#azure #backend #infosec #security

12 min read

DarkEdges

Apr 12

Weekend Build Recap: Trust-Aware API Access with OpenID Federation

#showdev #api #devjournal #security

2 min read

DarkEdges

Dec 3 '25

Enriching Vault OIDC Tokens with SPIFFE Identity Metadata using Terraform

#devops #security #terraform

3 min read

DarkEdges

Nov 7 '25

Auto-Detecting CSV Schemas for Lightning-Fast ClickHouse Ingestion with Parquet

#node #dataengineering #database #automation

1

5 min read

DarkEdges

Aug 22 '25

Uprading Ping Identity Platform to 8.0.0

2 min read

DarkEdges

Aug 16 '25

Creating a Workflow using your Connector

1 min read

DarkEdges

Aug 16 '25

Creating a Connector using the Okta Workflow Connector Builder

3 min read

DarkEdges

Aug 16 '25

Finally testing the solution

#aws #apigateway #systemdesign #testing

1 min read

DarkEdges

Aug 16 '25

Deploying the AWS API Gateway V2 to LocalStack

1 min read

DarkEdges

Aug 16 '25

Deploying a custom API via AWS Fargate

1 min read

DarkEdges

Aug 16 '25

Deploying an Private ALB to LocalStack

1 min read

DarkEdges

Aug 15 '25

Configuring Terraform to deploy into LocalStack

3 min read

DarkEdges

Aug 15 '25

Protecting an API with AWS API Gateway and Auth0

#webdev #aws #containers

1

2 min read

DarkEdges

Apr 22 '25

kind, wsl2 and multus

#kubernetes #multus #microsoft

3 min read

DarkEdges

Jan 27 '25

Service Accounts with PingAM

#pingam #forgerock #jwt #serviceaccount

3 min read

DarkEdges

Oct 1 '24

Creating an Microsoft Entra Enterprise Application using Terraform

#terraform #azure

2

3 min read

DarkEdges

Aug 30 '24

ForgeRock Identity Platform: Unleash Your IAM Potential in Minutes

#forgerock #docker

1 min read

DarkEdges

Aug 17 '24

Salesforce Connected App

#salesforce #identitymanager #forgerock

2 min read

DarkEdges

Aug 17 '24

ForgeRock Identity Manager and Remote Connector Server

#forgerock #identitymanager #remoteconnectorserver

3 min read

Two Year Club

One Year Club

Writing Debut