Blog

Better Auth 1.7 shipped DPoP, back-channel logout, and MCP alignment. Its own upgrade guide shows why the operational half of an OAuth provider costs more.

Support agents need to see what a user sees. Here is how to run impersonation on AuthKit and Audit Logs with scoping, short sessions, clean revocation, and dual-identity records.

Internal AI tooling inverted the internal-tools org chart. Domain owners build their own agents, and the platform team now ships substrate and access controls.

Checking that an address looks right and checking that it can receive mail are different problems. Most signup forms only solve the first one.

Build a complete AuthKit flow in Kotlin, from Gradle dependency to signed-out state, with no client secret in your APK.

Follow the official Agent SDK examples and every user's agent runs on one shared token, which is usually yours. Here is how to bind each tool call to the signed-in user instead, using AuthKit and Pipes relay.

Add enterprise SSO (SAML and OIDC) to an Express.js API with WorkOS. Step-by-step Node.js code for the login redirect, the callback, and JWT verification on protected API routes.

Auth0's beta keeps the authorization server you already run and adds the enterprise surface around it. The differences from WorkOS show up in SCIM direction, plan tier, and which pricing table you are actually reading.

A Zoom zero-click RCE went from discovery to working exploit in a day. The exploit took one day; your sessions last longer than that.

A practical guide to Keychain storage, refresh token rotation, and terminal vs. transient failures on iOS

How an API tells a client that the user needs to authenticate again, why acr_values is only a request while max_age is a requirement, and what the auth_time claim actually proves.

WorkOS Emulate runs the WorkOS API on your own machine, so your tests can seed real data, drive full login flows, and force failures without touching prod.

What it's actually like to join WorkOS as a product designer: transparent context by default, and AI as everyday design tooling.

Abhi Aiyer, co-founder and CTO of Mastra, demoed the company's open source software factory at Agent Night: memory, harness, a rules engine around work.

Irina Nazarova's Agent Night lightning demo: why GitHub, not your docs site, is the path into model training sets, and how Evil Martians measured all of it.