https://kevinsec.io/tags/authentication/Recent content in Authentication on KevinSecHugoen-usWed, 08 Jul 2026 00:00:00 +0000https://kevinsec.io/blog/api-broken-authentication-common-testing-patterns/Wed, 08 Jul 2026 00:00:00 +0000https://kevinsec.io/blog/api-broken-authentication-common-testing-patterns/A practical checklist for identifying broken authentication patterns in APIs, from token handling to weak login flows and session lifecycle issues.https://kevinsec.io/blog/jwt-security-testing-checklist/Wed, 08 Jul 2026 00:00:00 +0000https://kevinsec.io/blog/jwt-security-testing-checklist/A practical checklist for testing JSON Web Token security in web applications and APIs.https://kevinsec.io/blog/password-reset-vulnerabilities-common-patterns/Wed, 08 Jul 2026 00:00:00 +0000https://kevinsec.io/blog/password-reset-vulnerabilities-common-patterns/A practical guide to common password reset vulnerabilities, how they appear in real applications, and how to test them safely.https://kevinsec.io/blog/rate-limiting-the-control-that-many-apps-forget/Wed, 08 Jul 2026 00:00:00 +0000https://kevinsec.io/blog/rate-limiting-the-control-that-many-apps-forget/A practical guide to rate limiting as a security control for login, OTP, password reset, API, and resource-intensive endpoints.https://kevinsec.io/blog/authentication-testing-checklist-for-web-applications/Wed, 08 Jul 2026 00:00:00 +0700https://kevinsec.io/blog/authentication-testing-checklist-for-web-applications/A practical authentication testing checklist for web applications.