Rob Finneran

🚨 Engineers integrating OAuth2 / OIDC with WSO2… you know the pain. Handling token validation, PKCE, JWKS, signature verification, user mapping, and secure callbacks often turns into a mess of custom code scattered across controllers, middleware, and services. So I decided to fix that. Today I'm releasing NovaShield WSO2 SDK v2.0.1 – Security Core, an open-source library designed to make secure integration with WSO2 Identity Server clean, extensible, and production-ready. The goal was simple: turn a fragile authentication integration into a solid, security-first architecture. 🔐 What makes this SDK different • Cryptographic JWT Validation (JWKS) Tokens are verified against WSO2 public keys. No more trusting decoded payloads blindly. • Native PKCE Support Built-in code_verifier and code_challenge (S256) generation to secure SPA and mobile authentication flows. • Strict OIDC Compliance Automatic validation of issuer and audience. • Framework Agnostic Works seamlessly with NestJS, Express, FastAPI, or any backend framework. • Custom Error Architecture Granular exception handling: Wso2AuthenticationError Wso2TokenError Wso2SignatureError Wso2NetworkError • Typed Generics (TypeScript) Define your own user and permission models. The SDK adapts to your domain — not the other way around. • Server-to-Server Ready Client Credentials support with automatic token caching, ideal for microservices architectures. 🏗 Architecture First Instead of mixing authentication logic with business logic, NovaShield separates concerns through: ✔ User Mapping Providers ✔ Permission Providers ✔ Secure token lifecycle management The result: clean code, stronger security, and a maintainable identity layer. 📦 Install npm install @novashield352/novashield-wso2 🔗 Open Source Repository https://lnkd.in/eDpzaPC6 If you work with Identity Management, OAuth2, OIDC, Fintech platforms, or secure backend architectures, I'd love to hear your thoughts. Contributions, feedback, and discussions are welcome. Let’s build better and safer authentication layers. #OpenSource #SoftwareEngineering #BackendDevelopment #OAuth2 #OIDC #CyberSecurity #TypeScript #NodeJS #WSO2 #Fintech

1

CAR Forecasts Mild Price Growth and Sales Rebound for 2026 #sanfrancisco #sfrealestate #bayarearealtor #bayarea #california #bayarearealestate #sanfranciscorealestate #sfrealtor #californiarealestate #siliconvalleyrealestate

1

Housing Heat Index 2025 Let’s connect and talk about the latest insights in the industry! #sanfrancisco #sfrealestate #bayarearealtor #bayarea #california #bayarearealestate #sanfranciscorealestate #sfrealtor #californiarealestate #siliconvalleyrealestate

1

The state of California requires OS developers to ask for age verification or be subject to fines in 2027. https://lnkd.in/g_GbYrm6 This is a real blow to open source operating systems. For one thing, we don't want different "signals" per OS. We'd want a standard interface for browsers to query the OS and have it be portable. I don't think this is a reasonable ask for folks like me that do OS development as a hobby. I'm not microsoft or apple. There also seems to be a tie-in to app stores which might also require integration with package managers.

12

1 Comment