Sam Bellen
where else to find them
what they talk about
all 9 in the filters
where they keep going back
- JSConf Budapest2 editions2016–2022
- FrontCon2 editions2018–2019
all 32 in the filters
on a stage with
- Belen Albezaonce
- Eduardo Sadaonce
- Jas Sagooonce
all 6 in the filters
who talks about the same things
- Soledad Penadés11 talks
- Armagan Amcalar11 talks
- Vitalii Bobrov16 talks
- Rowdy Rabouw21 talks
- Suz Hinton18 talks
- Hubert Sablonnière24 talks
| title | conference | date |
|---|---|---|
| MCP auth: Stop registering, Start linking | MCP Live! 2026 | 2026-09-09 |
Shows that Dynamic Client Registration creates runaway client-id sprawl while Client ID Metadata Documents turn the client_id into an HTTPS URL the server… | ||
| Don't give your agent the master key | Vercel Ship 26 London | 2026-06-17 |
Demo shows one agent, three tools, four identity patterns implemented with the Vercel AI SDK and eve scaffolding (npx eve@latest). It issues token vault… | ||
| Bearer of Good News | Devoxx France 2026 | 2026-04-22 |
OAuth 2.1 consolidates fixes: PKCE mandatory, exact redirect matching, one‑time refresh tokens and HTTPS only; DPoP binds access and refresh tokens to… | ||
| No way, JOSE! | NG-DE Conference 2022 | 2022-10-06 |
Starts from concrete mechanics: digital signatures use a private key to sign and a public key to verify, encryption uses public key to encrypt and private key… | ||
| No way, JOSE! | JSConf Budapest 2022 | 2022-06-02 |
Explains how JOSE encodes signatures (JWS as three base64 parts) and encryption (JWE as five parts), demonstrates decrypting the encrypted content‑encryption… | ||
| No Way, JOSE! | DevDays Europe 2022 | 2022-04-27 |
Explains JOSE as JSON Object Signing and Encryption and shows exact formats: JWS: three parts (base64 header payload signature) and JWE: five parts (header… | ||
| No way, JOSE! | jsday 2022 | 2022-04-21 |
Explains concrete cryptography steps: hashing and HMAC (SHA-256 and HMAC-SHA256), signature vs keyed MAC, RSA key generation and why 2048+ bits matter, and how… | ||
| Passwords are so 1990! | jsday 2022 | 2022-04-21 |
Argues that usernames and passwords get replaced by the web authentication API which uses public/private key pairs stored on hardware or built into devices and… | ||
| Passwords are so 1990 - Sam Bellen - PHP UK 2022 | PHP UK Conference 2022 | 2022-02-16 |
Claims passwordless login replaces passwords using public/private keys, demonstrates registration and login with a Web Authentication API flow (JS calls like… | ||
| No Way, JOSE! | NG-BE 2021 | 2021-12-02 |
Explains JOSE with concrete, verifiable details: a small RSA implementation that encrypts and decrypts numeric examples, a CLI demo on GitHub that reproduces… | ||
| Passwords are so 1990 | NDC Oslo 2021 | 2021-11-29 |
Argues that passwords are replaceable with public/private key flows using the WebAuthn API and hardware or platform authenticators, demonstrates a working Mac… | ||
| No way, JOSE! Cryptography basics | DevBreak 2021 | 2021-09-08 |
Clear, runnable specifics: hashing vs keyed hashing with SHA-256 producing a 256‑bit digest and HMAC‑SHA256 for integrity; signatures using RSA, EC and Ed25519… | ||
| That's out of scope! | Apidays LIVE Paris 2020 | 2020-12-08 |
Defines ABAC as fine-grained but often overkill; RBAC groups multiple permissions into roles; Auth0 can embed permissions in JWT so APIs can avoid separate… | ||
| No Way, JOSE | JSConf Hawaiʻi 2020 | 2020-02-05 |
Explains concrete claims and working examples rather than vague theory: demonstrates RSA key math using 61 and 53 primes to show how public exponent and… | ||
| Passwords are so 1990? | JSConf JP 2019 | 2019-11-30 |
Passwords are brittle and replaceable by key-based login using the web authentication API, which creates a private/public keypair on hardware authenticators or… | ||
| Passwords are so 1990 | WebCamp Zagreb 2019 | 2019-10-11 |
Argument that passwords are obsolete backed by a demo of the Web Authentication API using private/public key pairs and cryptographic challenges (16+ byte… | ||
| Passwords are so 1990 | Voxxed Days Ticino 2019 | 2019-10-09 |
Passwords become replaceable by the Web Authentication API using public/private key pairs stored in hardware or platform authenticators (USB, NFC, BLE, Touch… | ||
| Passwords Are So 1990 | Voxxed Days Banff 2019 | 2019-09-20 |
Argues that passwords are replaceable by WebAuthn which uses public/private keys, demonstrates navigator.credentials.create and .get in JavaScript, and shows… | ||
| Knock knock, who's there? Authenticating your single page apps using JSON Web Tokens | GrillJS 2019 | 2019-09-07 |
Explains JWT structure as header.payload.signature (base64 JSON header, payload claims, signature) and shows a demo SPA that uses an ID token to display user… | ||
| Knock knock, who's there? Authenticating your single page apps using JSON Web Token | AngularDay 2019 | 2019-06-13 |
Explains how JSON Web Tokens break into header/payload/signature, shows a live demo exchanging credentials for an access token and an ID token that populates a… | ||
| Passwords are so 1990 | Best of Web 2019 | 2019-06-07 |
Passwords cause friction and breaches: examples include MyFitnessPal 150 million and Marriott 500 million records. The surface solution is one‑time codes via… | ||
| How JSON Web Tokens Work and Can be Used to Secure Your Single Page Apps | apidays Helsinki 2019 | 2019-06-04 |
Explains how JWTs pack claims, expiry and audience into a base64 JSON trio and how a signature prevents tampering, showing header.payload.signature structure… | ||
| Authenticating your single page apps using JSON Web Tokens | apidays Singapore 2019 | 2019-04-23 |
Explains that JSON Web Tokens are three base64 parts—header, payload (claims) and signature—and that APIs can verify expiry and tampering without a database… | ||
| Knock knock, who's there? Authenticating your single page apps using JSON Web Tokens | foss-north 2019 | 2019-04-07 |
Explains exactly what a JWT contains and how to use one: the header/payload/signature structure, how signatures prevent tampering, and how to verify tokens via… | ||
| Knock knock, who’s there? Authenticating your single page apps using JSON Web Tokens | FrontCon 2019 | 2019-04-03 |
Explains exactly what a JSON Web Token contains, how to sign and verify it with JWT structure (header payload signature), and when an access token is actually… | ||
| Knock knock, who's there? Authenticating your single page apps using JSON Web Tokens | Jfokus 2019 | 2019-02-04 |
Explains how JWTs are three parts — header, payload and signature — and that an expiry claim inside token lets servers reject expired tokens without a DB… | ||
| Papers Please! A Non-Dystopian Look at Modern Authentication | DevOpsDays Tel Aviv 2018 | 2018-12-18 |
Covers concrete OAuth2 patterns for four real scenarios: server‑rendered web apps use the authorization code flow to exchange a code for tokens then issue a… | ||
| Channel your inner rockstar with the web audio API | FrontCon 2018 | 2018-06-14 |
Covers concrete Web Audio API mechanics: creating an AudioContext and nodes, loading audio via fetch/ArrayBuffer or getUserMedia input, oscillators with… | ||
| I didn’t know the Browser could do that | iJS 2018 Spring | 2018-04-11 |
Claim: modern browsers expose real device features and OS‑like services and Chrome actually implements most of them. Examples use actual APIs: speech synthesis… | ||
| I didn’t know the Browser could do that | International JavaScript Conference Munich 2017 | 2017-10-23 |
Live demos show concrete outcomes: browser speech synthesis speaks and can change pitch and voice, speech recognition needs Chrome and internet and transcribes… | ||
| Changing Live Audio with the Web-Audio-Api | AmsterdamJS Conference 2017 | 2017-06-08 |
Recreates stompbox effects inside a browser using Web Audio API and navigator.getUserMedia to feed an AudioContext chain; implements gain node volume, wave… | ||
| I Didn't Know The Browser Could Do That! | Front-Trends 2017 | 2017-05-24 |
Demos show the browser doing speech synthesis and recognition (speechRecognition works only in Chrome and sends audio to Google servers), geolocation plus… | ||
| Talking about JS APIS | JSDayES 2017 | 2017-05-12 |
Argues that TypeScript adoption increases JavaScript uptake and TC39 is prototyping lightweight typing to merge the best bits into the language; contrasts… | ||
| Changing live audio with the web-audio-api | Frontend United 2016 | 2016-05-27 |
Claims that standard browser plumbing can recreate stompbox effects: capture via getUserMedia into an AudioContext, route through nodes and back to speakers… | ||
| Changing live audio with the web-audio-api | JSConf Budapest 2016 | 2016-05-12 |
Asserts guitar effect pedals are fully reproducible in the browser using the web-audio-api and demos a working chain of input → nodes → output with concrete… | ||
| nothing matches | ||