Token-Mediating Backend: An alternative to the BFF architecture
This post discusses the Token-Mediating Backend (TMB) authentication architecture for OAuth 2 applications. It covers how secure TMB is, when to use it, and...
May 7, 2026
Tags
tokens
Backend-for-Frontend: The most secure architecture for browser-based apps
On September 8, 2025, developer Josh Junon received what looked like a legitimate npm two-factor authentication (2FA) reset email. Within hours, malicious code...
April 22, 2026
Backend For Frontend Authentication in FusionAuth
This article discusses the dangers of storing OAuth tokens in the browser or on a client-side device – a common pattern in serverless architectures like...
June 30, 2025
Securing Your APIs: Verifying API Keys And Using Scopes
When you are building out APIs for web applications, desktop apps or mobile applications, you must authenticate these requests. You may say to yourself, "of...
February 5, 2024
Grammarly's OAuth mistakes
Yesterday, a security firm released news about three different exploits, all related to social logins and token verification. The security firm ethically and...
October 26, 2023
Showing 1 to 5 of 5 results