GitHub will require 2FA for all developers who commit by September 2, 2026.
End of a transition started in 2022 - the real passive remains the automation workflows still relying on non-2FA tokens.
Jul 20, 2026 at 16:39 17 12
Modern authentication: passkeys, OIDC, sessions - the real short list
A popular HN thread reignites the question: how should we authenticate an app in 2026? The answer is no longer "JWT + refresh token". A clear overview.
Jul 11, 2026 at 17:19 29 6