Brooks Naylor - PropelAuth Blog | PropelAuth Blog

Brooks Naylor

What is Password Hashing?

What is Password Hashing?

If you’ve been paying attention in the past few years, you may have seen that password breaches have made headlines more than a few times. In many of these cases, each breach's overall impact on users depended on whether or not they hashed passwords and how well

FastAPI Authentication Guide

FastAPI Authentication Guide

FastAPI is a modern web framework for building out APIs using Python. It’s fast, lightweight, and quick to build with, so it’s no wonder that many developers and companies use FastAPI for building out their products. Naturally, these applications and products might reach a point where the security

Authentication with Next 13 App Router and Supabase

Authentication with Next 13 App Router and Supabase

In this guide, we’ll build an example Next.js application with PropelAuth and Supabase. We cover the App Router version of Next.js 13, and demonstrate how to create an application that manages both users and organizations using PropelAuth. Create a PropelAuth Project The first step is to create

Authentication with Next.js 13 and Supabase

Authentication with Next.js 13 and Supabase

In this guide, we’ll build an example Next.js server-side rendered application with PropelAuth and Supabase. We cover the Pages Router version of Next.js 13, and demonstrate how to create an application that manages both users and organizations using PropelAuth. Create a PropelAuth Project The first step is

Announcing: NextJS 13 Support

Announcing: NextJS 13 Support

We’re excited to announce the release of our support for Next.js 13, and applications built using App Router! This library provides a simple way to integrate your Next.js application (either App Router or Pages Router) with PropelAuth in both server-side rendered contexts and client-side rendered contexts, in

Redirecting Users in PropelAuth

Redirecting Users in PropelAuth

PropelAuth provides configurable UIs for login, signup, and org management. We host these for you so you can start testing them, even before you’ve written any code. One question we often get, however, is how can I redirect my user back to the right place after they login? Default

API Key Authentication

API Key Authentication

We are excited to announce the release of API Key authentication, a powerful feature that adds another way for your users to make requests to your product. With API Keys, you can now create unique authentication keys for your end users and organizations, ensuring secure communication between your product and

Abra-QR-dabra: Watch Passwordless Mobile Auth Magically Appear

Abra-QR-dabra: Watch Passwordless Mobile Auth Magically Appear

A few days ago, a post on hacker news caught my eye, where folks were playing around with and linking to various QR Code designers. This got me to thinking, how quickly could I add a QR flow into our authentication processes? Starting Out For ease and speed, I wanted

Custom Metadata: How It Works

Custom Metadata: How It Works

Last week, we released a long awaited and asked for feature in PropelAuth, Custom Metadata on both users and organizations! However, the term “metadata” is nebulous and vague, so today we’re excited to walk through this new aspect of the product, and how you can start customizing to your

PropelAuth Product Updates: Dashboard Revamp, Staging Env, and More

PropelAuth Product Updates: Dashboard Revamp, Staging Env, and More

We are often working on large feature releases or product improvements, but this time around we have been hard at work on something truly large and impactful: a new and improved dashboard for PropelAuth! We wanted to walk through all of these changes to give you a sense of all

PropelAuth’s Annual Security Audit (2023)

PropelAuth’s Annual Security Audit (2023)

PropelAuth is deeply committed to the security of data within our platform. We have features like 2FA, enterprise SSO/SAML, brute force detection, custom roles & permissions for RBAC - all to make sure everyone’s accounts are protected and you can build secure applications on top of us. Furthering

What Does Timing Attack Actually Mean?

What Does Timing Attack Actually Mean?

Timing attacks Timing attacks are a class of malicious attacks against a product where the length of time that your application takes to perform a task leaks some information. Take, for example, an application that takes in an email and password to check. If there is no user with a

What Does Authorization Actually Mean

What Does Authorization Actually Mean

The word “auth” is complicated because there are a wide range of topics that fall in the bucket of “auth.” In this series, we’ll take a practical approach to understanding many of these topics with examples to learn from. What is Authorization? Authorization is the process of determining if

What Does Identity Provider Actually Mean?

What Does Identity Provider Actually Mean?

When it comes to online security and authentication, the term "Identity Provider" is often thrown around. But what does it actually mean? In simple terms, an Identity Provider (IdP) is a trusted service that authenticates and verifies the identity of users and provides them with access to protected

What Does 2FA Actually Mean?

What Does 2FA Actually Mean?

Amongst the crowd of acronyms in the authentication space, 2FA, or Two Factor Authentication, seems to be one of the more self explanatory names. But what actually goes into 2FA, and how does it factor into authentication as a whole? What is 2FA? 2FA, or two-factor authentication, is a security

What Does Passwordless Actually Mean?

What Does Passwordless Actually Mean?

Passwords have been around for a long time, and while they are easy to understand, they do come with some drawbacks. They are essential for keeping our online accounts secure, but they can also be a hassle to remember and manage. Luckily, there's a way to log in

What Does SAML Actually Mean?

What Does SAML Actually Mean?

Amongst the various acronyms and abbreviations in the world of authentication, SAML, which stands for Security Assertion Markup Language, is one of the most confusing. So here we’ll walk through what is involved in SAML SSO and paint a clearer picture of what it actually means. First, a brief

What Does SSO Actually Mean?

What Does SSO Actually Mean?

Before answering the question at hand, you should know that you’ve probably used SSO already. Any time you’ve signed up for or logged into a product using a Google or Facebook or other social account, you’ve been using SSO. SSO stands for "Single Sign-On", and

React/Rust + Axum Multi-Tenant Starter App

React/Rust + Axum Multi-Tenant Starter App

In this guide, we’ll build an example B2B application in React where users can sign up, login, manage their accounts, and view organization and member information, PropelAuth, React, and Rust/Axum. We're going to use the following technologies for this blog post: * React.js - for our

React/Python + Chalice Starter App

React/Python + Chalice Starter App

In this guide, we’ll build an example B2B application in React where users can sign up, login, manage their accounts, and view organization and member information, PropelAuth, React, Python, and Chalice. We're going to use the following technologies for this blog post: * React.js - for our

React/Flask Starter App

React/Flask Starter App

In this guide, we’ll build an example B2B application in React where users can sign up, login, manage their accounts, and view organization and member information, PropelAuth, React, and Flask. We're going to use the following technologies for this blog post: * React.js - for our frontend

React/Express Starter App

React/Express Starter App

In this guide, we’ll build an example B2B application in React where users can sign up, login, manage their accounts, and view organization and member information, PropelAuth, React, and Express. We're going to use the following technologies for this blog post: * React.js - for our frontend

Next.js Multi-Tenant Starter Application

Next.js Multi-Tenant Starter Application

In this guide, we’ll build an example B2B application in Next.js where users can sign up, login, manage their accounts, and view organization and member information, all using PropelAuth and NextJS. We're going to use the following technologies for walkthrough: * Next.js - for our frontend