Why Adaptive MFA is a Game Changer for User Experience
Security measures often feel like they're just making life harder for end users. Meanwhile, attackers are out there finding clever ways to bypass these tools....
August 7, 2026
Tags
security
Intelligent MFA Should Challenge Risk, Not Loyal Customers
There's an old line in security: the most secure system is the one that's switched off. It's also completely useless. Every authentication decision you make...
July 9, 2026
Browser-Based OAuth Client: The architecture you shouldn't be using
Of all possible browser-based OAuth architectures, the Browser-Based OAuth Client (BBOC) pattern is the least secure. Despite this, BBOC remains the most...
June 3, 2026
Token-Mediating Backend: An alternative to the BFF architecture
This post discusses the Token-Mediating Backend (TMB) authentication architecture for OAuth 2 applications. It covers how secure TMB is, when to use it, and...
May 7, 2026
Backend-for-Frontend: The most secure architecture for browser-based apps
On September 8, 2025, developer Josh Junon received what looked like a legitimate npm two-factor authentication (2FA) reset email. Within hours, malicious code...
April 22, 2026
Stop Registration Spam With Identity Pre-Verification
In our previous post, Announcing FusionAuth 1.59.0 - The Identity Ibex, we explored the shift towards separate Email and Phone Identities. This was a...
March 6, 2026
Backend For Frontend Authentication in FusionAuth
This article discusses the dangers of storing OAuth tokens in the browser or on a client-side device – a common pattern in serverless architectures like...
June 30, 2025
Showing 1 to 7 of 25 results