Filip Skokan @_panva

Identity, OpenID Connect, OAuth 2.0, SSO, Authorization, Authentication, Technical Standards. Node.js core collaborator and TSC member. github.com/panva Czech Republic Joined March 2019

Tweets

466
Followers

669
Following

129
Likes

82

Filip Skokan @_panva

a day ago

💬 It's partly because of @balazsorban44's projects' needs and the poor state of Vercel Edge Runtime Node compat at the time that we now have jose, openid-client, and oauth4webapi with no dependencies entirely built on top of Web Platform APIs such as Fetch and Web Cryptography.

Balázs Orbán @balazsorban44

2 days ago

22 8 345 45K 24

0 0 2 648 0

Filip Skokan @_panva

a week ago

The @npmjs name dispute process does not work anymore. It used to but no longer does. I have 3 npm pkg name claim disputes open for package names that see no downloads or activity since more than a decade ago. Tickets open for over a year with no response.

2 0 9 700 0

Node.js @nodejs

a month ago

Node.js v24.7.0 is out 💚 Featuring: - Post-Quantum Cryptography in node:crypto - Modern Algorithms in Web Cryptography API - Node.js execution argument support in single executable applications And more details in our blog: nodejs.org/en/blog/releas…

17 156 1K 72K 103

Filip Skokan @_panva

2 months ago

I was lucky to be part of the second cohort of @github Secure Open Source Fund program and I enjoyed every bit of it. The program is jam-packed with content that you don't want to miss. So if you have an impactful Open Source project, you should apply! github.blog/open-source/ma…

0 0 4 266 1

Filip Skokan @_panva

2 months ago

A number of JWT libraries are being flagged by low quality CVEs, mine included. I've promptly responded to their author 4 months ago and haven't heard back since. Now there are poor quality CVEs on MITRE that are getting synced across all security tools. What a shame, and PITA.

2 0 4 347 0

Filip Skokan @_panva

2 months ago

I'm going to be doing a pass over @nodejs Web Cryptography module as soon as Web Incubator CG (WICG) adopts the Web Cryptography Modern Algorithms proposal...

1 0 2 231 0

Download Image

Filip Skokan @_panva

2 months ago

I've verified that oidc-provider (built using Koa) will run on CF Workers. Great job @yagiznizipli. No runtime can thrive without node compat and CF's approach to it is just 🧑‍🍳🤌

0 3 9 3K 1

Filip Skokan @_panva

2 months ago

OpenSSL 3.5 upgrade in Node.js underway and so is planning for all the goodness that comes with having 3.5 at hand - ML-DSA, ML-KEM, HPKE

0 0 3 213 1

Download Image

Mike Jones @selfissued

2 months ago

Updates to Audience Values for OAuth 2.0 Authorization Servers self-issued.info/?p=2745 @_panva @__b_c @openid #IETF #OAuth #OpenID #OpenIDConnect #OpenIDFederation #FAPI

0 1 4 265 1

Filip Skokan @_panva

3 months ago

Having users keep a list of ESM-only dependencies to ignore "transform" on is the, as advertised, delightful Jest experience? As a maintainer of ESM-only modules I am not delighted being the support channel for @jestjs_ users who struggle to use web-compatible ESM modules.