Uitsmijter 0.11.0: Login Without a Keyboard, Providers Without a Script

Version 0.11.0 brings the OAuth 2.0 Device Authorization Grant, predefined uitrusting/v1 providers, tenant-aware provider scripts, a roles claim, and a round of spec-conformance fixes to the authorize and token endpoints.

Signing in without a keyboard — the Device Authorization Grant

Smart TVs, CLIs and other keyboard-shy devices finally get a proper login. Uitsmijter 0.11 adds the OAuth 2.0 Device Authorization Grant (RFC 8628) — here is what it does and how to switch it on.

Uitsmijter 0.10.5: Solid Logout, Sharper UX

Version 0.10.5 tightens the logout flow across multi-domain setups, hardens cookie handling for WebKit, and polishes the login experience with small but meaningful improvements.

SSO for Grafana: Because Nobody Likes Remembering Another Password

A short, practical guide to configuring Grafana to use Uitsmijter as your SSO provider. One login to rule them all.

Uitsmijter 0.10.3: Dynamic Scope Assignment

Version 0.10.3 introduces provider-driven scope enrichment, enabling authentication providers to assign user-specific permissions dynamically during login.

Built Cloud-Native from Day One: Why We Rewrote SSO from Scratch

After decades in IT, a few years ago we broke the cardinal rule and built an SSO server from the ground up. Here's why existing solutions didn't fit our needs, and what we learned from rethinking authentication for the Kubernetes-era.

From One to Many: Understanding JWT Signing as You Scale

Follow a startup's journey from simple authentication to distributed systems, learning when and why to switch from HS256 to RS256 JWT signing along the way.

Uitsmijter 0.10: Enterprise-Grade JWT Signing with JWKS Support

Introducing RS256 asymmetric signing, automatic key rotation, and RFC 7517-compliant JWKS endpoints. Uitsmijter 0.10 brings production-ready JWT management with zero-downtime migration from HS256.

Uitsmijter 0.10.0: Foundation for the Future

A major update bringing OpenID Connect Discovery, Swift 6.2, Redis High Availability, and a modernized architecture ready for advanced features. Building the foundation for next-generation OAuth2 capabilities.