Viewing profile — woloski

things should be back to normal. Are you still seeing an issue?

It is great to see that the industry is moving from webhooks to Functions. We've seen this model succeed at Auth0 with our Rules feature [1] implemented 3 years ago. Recently produ…

The article is talking about webtask.io, the underlying engine for sandboxed code execution used by Auth0 for allowing customers to extend the platform with arbitrary nodejs code. …

Also looking for Technical Product Marketing Manager

hi sean, it's a hidden program :). We started this year with the first two interns and there is not much there on the site yet. If you are interested, jobs+interns@auth0.com Type o…

Auth0 https://auth0.com - Remote | Seattle, USA | Buenos Aires, AR Auth0 makes identity simple for developers. Our subscriber base consists of more than 24,000 developers at over 2…

Yep, you got it right. Re: holding the keys, response below. The encryption keys are on the server. We encourage you to deploy your own sharelock instance. We made that super easy …

Read my response above.

Read my response above.

The encryption keys are on the server. We encourage you to deploy your own sharelock instance. We made that super easy with Heroku for instance ( https://dashboard.heroku.com/new?t…

To start with, OAuth is an authoriation protocol and JWT is a token format (a signed and/or encrypted piece of data). So they are orthogonal. The OAuth protocol doesn't specify whi…

Thanks for spreading the word Adam! We (Auth0) are heavy promoters of the usage of JWT. Here are some articles about using JWT instead of cookies on single page apps with APIs, and…

We wrote a blog post that shows how you can authenticate your users and get temporary security credentials from AWS based on the user tokens to avoid putting your keys on the clien…

Yes, I don't think there is a one-size-fits-all answer. It will depend on your use cases. You can always start small using JWT and move to database backed tokens when you get a bet…

For images that are protected you can use this approach http://blog.auth0.com/2014/01/27/ten-things-you-should-know-...

Yes, that's correct.

Hey, Matias founder of Auth0 ( https://www.auth0.com ) here (we wrote the original article). re: cookies vs xss. Expanding on sil3ntmac comment, based on my experience, it's easier…