hello , in this part we will find how to read the JWT. In the first two parts of this series, we: Now, let’s address the fundamental question: What exactly is that huge, cryptic string we call the Access Token? It looks like a random, daunting string, but it’s actually a compact, self-contained digital passport—the JSON Web Token (JWT). When weContinue reading “Decoding the JSON Web Token (JWT) “
Author Archives: rafaelit
Keycloak S2S Verification with Postman and the aud Claim
In our previous post, we detailed why we moved away from legacy AD service users and adopted Keycloak’s Client Credentials Grant for secure Service-to-Service (S2S) authentication. We configured our Chat App Service (chat-app-service) to call the protected CRM API Gateway (crm-api-gateway), locking down access using the critical Audience (aud) claim. Now for the final, and most satisfying, step: Verification. We needed a standard, accessible tool to proveContinue reading “Keycloak S2S Verification with Postman and the aud Claim “
Secure Service-to-Service (S2S) Authentication in Microservices with Keycloak & Audience
Our Problem: The Fragility of Legacy S2S in a Microservices World For years, when we needed one application to talk to another via a REST API, the solution was straightforward: we’d create a dedicated Active Directory (AD) service user. This approach worked beautifully with our monolithic applications, especially those running on .NET Framework on IIS. The tight integration with Windows Authentication made it seamless. Continue reading “Secure Service-to-Service (S2S) Authentication in Microservices with Keycloak & Audience “
Keycloak: Fixing “400 Bad Request – Request Header or Cookie Too Large” for Users with Many AD Groups
Problem Description Users who are members of hundreds of Active Directory groups receive a “400 Bad Request – Request header or cookie too large” error when trying to authenticate to web applications through Keycloak using OIDC/Kerberos authentication. Root Cause When using Kerberos/SPNEGO authentication with Active Directory, the Kerberos authentication ticket contains ALL of the user’sContinue reading “Keycloak: Fixing “400 Bad Request – Request Header or Cookie Too Large” for Users with Many AD Groups “
Deny permission on AD Group
hello If someone give “deny” permissions on AD Group for “EveryOne” group, you will not be able to add or modify the permissions. if you try to open Security Tab you will get this error: “Windows can not edit the permissions on ‘Group Name’ because they have been written in a nonstandard format by another application.Continue reading “Deny permission on AD Group”
New Outlook for Windows
The new Outlook for Windows offers a range of features designed to enhance your email and calendar experience. Here are some key highlights: Support for key Outlook features Feature Outlook on the web Outlook for Windows Windows Mail app New Outlook for Windows Pin emailsPin a message to move it to thetop of your inboxContinue reading “New Outlook for Windows”
New Chrome Feature Scans Password-Protected Files
Google Chrome improve browser security and now warns when downloading risky password-protected files and provides improved alerts with more information about potentially malicious downloaded files. “These two tiers of warnings are distinguished by iconography, color, and text, to make it easy for users to quickly and confidently make the best choice for themselves based on theContinue reading “New Chrome Feature Scans Password-Protected Files”
Chrome Enterprise Premium
At Google Cloud Conference “Next”, google announced a new frontline of defense for organizations: Chrome Enterprise Premium, an offering that can help simplify and strengthen endpoint security. Google Extend her Chrome Enterprise Edition for business and add Central management for security capabilities on her browser. https://cloud.google.com/blog/products/identity-security/introducing-chrome-enterprise-premium Chrome Enterprise Premium is generally available now, with prices starting at $6 perContinue reading “Chrome Enterprise Premium”
Apache – error reading the headers
For some users the connection to application based on Apache Server fails with error of “Access denied” , when you look in server logs you see this error: This error depend on the number of user group membership , if user belongs to many groups is “header” pass the number of bytes that will be allowedContinue reading “Apache – error reading the headers”
Outlook – Something is wrong error [2002]
In this post we will talk about a recently error that 365 user’s get when they work with office 365 applications. The mostly popular application with this error it OUTLLOK 365. the error popup just when you open the outlook or it can popup randomly. The Cause This error can be caused by multiple reasonsContinue reading “Outlook – Something is wrong error [2002]”