Browser-Based OAuth Client: The architecture you shouldn't be using
Of all possible browser-based OAuth architectures, the Browser-Based OAuth Client (BBOC) pattern is the least secure. Despite this, BBOC remains the most...
June 3, 2026
Of all possible browser-based OAuth architectures, the Browser-Based OAuth Client (BBOC) pattern is the least secure. Despite this, BBOC remains the most...
June 3, 2026
In FusionAuth FGA By Permify, you can run individual permission checks quickly. Each check takes about 15 milliseconds (ms), which is as fast as a single frame...
April 6, 2026
When engineering teams evaluate identity infrastructure, they tend to focus on features, pricing, and security certifications. Those all matter. But there's...
February 17, 2026
Since release, the FusionAuth CLI has helped users better manage FusionAuth instances. Common use cases include theme management, email template configuration,...
May 12, 2026
Every day, my team and I talk to engineering leaders building the next generation of digital products. Those applications are increasingly complex,...
November 20, 2025
We're excited to share some major news from the FusionAuth team. It's the right time for evolution as FusionAuth continues to grow our developer-first CIAM...
July 1, 2025
Understanding users' behavior can help guide product development and improve customer retention. This article demonstrates how to use FusionAuth to track...
May 26, 2026
The acquisition of Permify by FusionAuth might be like the great buddy movie you never saw coming. Two different products meeting, coming together and bonding...
May 8, 2026
This post discusses the Token-Mediating Backend (TMB) authentication architecture for OAuth 2 applications. It covers how secure TMB is, when to use it, and...
May 7, 2026
Progressive delivery is the idea that instead of dumping a release of software onto your users, you allow them to control when new features are rolled out. It...
May 5, 2026
Get updates on techniques, technical guides, and the latest product innovations coming from FusionAuth.