# Posts by tag 'authentication' — Liran Tal

AI security researcher, open-source maintainer, and author. Explore Liran Tal’s blog, research papers, developer tools, books, and conference talks.

Canonical: https://lirantal.com/tag/authentication

*   Jun 8, 2025 · 7 min read

    ## [CORS, SameSite and CSRF: The 3 Dimensions of Cookie based Authentication](/blog/cors-samesite-csrf-3-dimensions-cookie-authentication)

    Demystifying the 3 dimensions of cookie-based authentication: CORS, SameSite, and CSRF.

    *   [cors](/tag/cors)
    *   [samesite](/tag/samesite)
    *   [csrf](/tag/csrf)
    *   [cookie](/tag/cookie)
    *   [authentication](/tag/authentication)

     [![](/_astro/cors-samesite-csrf-cookie-based-authentication.D8ZQsW1e_1osMPn.jpg)](/blog/cors-samesite-csrf-3-dimensions-cookie-authentication)

*   May 3, 2024 · 5 min read

    ## [Poor Express Authentication Patterns in Node.js and How to Avoid Them](/blog/poor-express-authentication-patterns-nodejs)

    Tired of seeing poor authentication patterns in Node.js applications and Express code examples? Here's a guide on how to avoid them and what to do instead

    *   [nodejs](/tag/nodejs)
    *   [express](/tag/express)
    *   [authentication](/tag/authentication)
    *   [security](/tag/security)

     [![](/_astro/nodejs-poor-auth-express-conventions.CVHAjPGW_Z27bPDE.jpg)](/blog/poor-express-authentication-patterns-nodejs)