Decoding the JSON Web Token (JWT) 

hello , in this part we will find how to read the JWT. In the first two parts of this series, we:  Now, let’s address the fundamental question: What exactly is that huge, cryptic string we call the Access Token? It looks like a random, daunting string, but it’s actually a compact, self-contained digital passport—the JSON Web Token (JWT).  When weContinue reading “Decoding the JSON Web Token (JWT) “

Secure Service-to-Service (S2S) Authentication in Microservices with Keycloak & Audience 

Our Problem: The Fragility of Legacy S2S in a Microservices World  For years, when we needed one application to talk to another via a REST API, the solution was straightforward: we’d create a dedicated Active Directory (AD) service user. This approach worked beautifully with our monolithic applications, especially those running on .NET Framework on IIS. The tight integration with Windows Authentication made it seamless. Continue reading “Secure Service-to-Service (S2S) Authentication in Microservices with Keycloak & Audience “

Deny permission on AD Group

hello If someone give “deny” permissions on AD Group for “EveryOne” group, you will not be able to add or modify the permissions. if you try to open Security Tab you will get this error: “Windows can not edit the permissions on ‘Group Name’ because they have been written in a nonstandard format by another application.Continue reading “Deny permission on AD Group”

New Chrome Feature Scans Password-Protected Files

Google Chrome improve browser security and now warns when downloading risky password-protected files and provides improved alerts with more information about potentially malicious downloaded files. “These two tiers of warnings are distinguished by iconography, color, and text, to make it easy for users to quickly and confidently make the best choice for themselves based on theContinue reading “New Chrome Feature Scans Password-Protected Files”

Chrome Enterprise Premium

At Google Cloud Conference “Next”, google announced a new frontline of defense for organizations: Chrome Enterprise Premium, an offering that can help simplify and strengthen endpoint security. Google Extend her Chrome Enterprise Edition for business and add Central management for security capabilities on her browser. https://cloud.google.com/blog/products/identity-security/introducing-chrome-enterprise-premium Chrome Enterprise Premium is generally available now, with prices starting at $6 perContinue reading “Chrome Enterprise Premium”

Apache – error reading the headers

For some users the connection to application based on Apache Server fails with error of “Access denied” , when you look in server logs you see this error: This error depend on the number of user group membership , if user belongs to many groups is “header” pass the number of bytes that will be allowedContinue reading “Apache – error reading the headers”

Outlook – Something is wrong error [2002]

In this post we will talk about a recently error that 365 user’s get when they work with office 365 applications. The mostly popular application with this error it OUTLLOK 365. the error popup just when you open the outlook or it can popup randomly. The Cause This error can be caused by multiple reasonsContinue reading “Outlook – Something is wrong error [2002]”

Hide Group Members Exchange

In some cases you need to hide group members form Outlook or OWA users . you can hide the members by set “true” value to hideDLMembership Property. You can change the property with the GUI or by using POWERSHELL. For Example, if you have a group with name – “SecGroup” you can set the valueContinue reading “Hide Group Members Exchange”