<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Authentication on 梦兽编程</title><link>https://rexai.top/en/tags/authentication/</link><description>Recent content in Authentication on 梦兽编程</description><generator>Hugo -- 0.163.3</generator><language>en</language><copyright>梦兽编程</copyright><lastBuildDate>Sat, 08 Aug 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://rexai.top/en/tags/authentication/index.xml" rel="self" type="application/rss+xml"/><item><title>Stop Hand-Rolling JWT Validation: Add Production-Grade Auth to Your Rust API with OIDC + Axum</title><link>https://rexai.top/en/tutorials/rust/rust-oidc-axum-auth/</link><pubDate>Sat, 08 Aug 2026 00:00:00 +0000</pubDate><guid>https://rexai.top/en/tutorials/rust/rust-oidc-axum-auth/</guid><description>Rolling your own JWT validation, 8 out of 10 people miss something: no alg=none guard, no aud/iss checks, hardcoded keys, no clock-skew tolerance. This guide builds an OIDC Bearer-token validation middleware in Axum — JWKS fetching, algorithm whitelist, iss/aud checks, clock-skew tolerance — plus the simplest way to plug into Keycloak or Auth0.</description></item></channel></rss>