https://csp-guide.com/tags/workos/ Recent content in Workos on CSP Guide Hugo -- gohugo.io en-us Fri, 07 Aug 2026 00:00:00 +0000 https://csp-guide.com/posts/csp-for-workos-authentication/ Fri, 07 Aug 2026 00:00:00 +0000 https://csp-guide.com/posts/csp-for-workos-authentication/ <p>Content Security Policy gets awkward fast once authentication enters the picture.</p> <p>A basic app can survive on <code>default-src 'self'</code> and a couple of explicit allowlists. Then you add WorkOS authentication, maybe a hosted sign-in page, maybe social login redirects, maybe passkeys, and suddenly people start punching holes in the policy until the browser stops complaining.</p> <p>That usually works. It also usually leaves you with a CSP that looks secure but barely does anything.</p>