Building a PingFederate token generator that mints Biscuits

·2 views

Repo: darkedges/pf12.3-biscuit-datalog-tokens, plugin source in pf-biscuit-generator/ Part 1 argued for a hybrid: PingFederate issues JWTs at the edge, and token exchange turns them into Biscuits for everything inside. This part builds the one piece PingFederate doesn't ship, a token generator that mints a Biscuit. It's a few hundred lines of Java. Most of the interesting decisions aren't in the Java, though. They're about what you let into the authority block.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Database Connection Pooling: Why Opening a New Database Connection Every Time Is a Bad Idea

Imagine your application receives 1,000 requests in a few seconds. Each request needs to communicate with your database. Now imagine opening a brand-new database connection for every single request. That's a lot of unnecessary work. This is exactly the problem database connection pooling solves.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

I Got Tired of College Chaos, So I Built THIS (And You Need to See It) 🚀🤯

Picture this: It’s Tuesday, 8:55 AM. You have a crucial lecture in exactly 5 minutes, but the room number just changed. You’re frantically scrolling through a clunky university portal that looks like it hasn't been updated since 2004, and suddenly... the site crashes. Sound familiar?

0 comments Read more at DEV Community

ProgrammingDEV Community ·

SayLess

This is a submission for the Hacktoberfest Weekend Challenge: Build for a Friend This is a submission for the Hacktoberfest Weekend Challenge: Build for a Friend. I built SayLess, a private writing assistant for difficult conversations. Sometimes you know what you want to say, but finding the right words is hard. SayLess helps by turning a message into three short reply options: Soft, Natural, and Direct. You can also choose what you want to communicate, such as apologizing, explaining, saying no, or setting a boundary.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Bitget $387.5M Hack Analysis: Zero-Day Exploit, Admin Credential Theft, and THORChain Laundering

In late September 2026, the cryptocurrency industry witnessed one of its most sophisticated exchange breaches to date. Bitget, a major global digital asset platform, suffered a massive security incident resulting in the loss of approximately $387.5 million. Unlike typical hot wallet key extractions, this attack leveraged a zero-day vulnerability, compromised administrative credentials, and highly efficient cross-chain laundering techniques. The incident not only highlights the evolving tactics of state-aligned threat actors but also underscores the critical role of artificial intelligence in m

0 comments Read more at DEV Community