Access Token vs Refresh Token: Key Differences & When to Use Each

Access Token vs Refresh Token: Key Differences & When to Use Each

Deep dive for CTOs on access vs refresh tokens. Learn key differences, security best practices for CIAM, and how to build enterprise-ready SSO systems ...
Technical Advisory – Azure B2C – Crypto Misuse and Account Compromise

Technical Advisory – Azure B2C – Crypto Misuse and Account Compromise

Microsoft’s Azure Active Directory B2C service contained a cryptographic flaw which allowed an attacker to craft an OAuth refresh token with the contents for any user account. An attacker could redeem this ...