<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>authentication on</title><link>https://thomaskioko.me/tags/authentication/</link><description>Recent content in authentication on</description><generator>Hugo -- gohugo.io</generator><language>en-us</language><lastBuildDate>Wed, 18 Mar 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://thomaskioko.me/tags/authentication/index.xml" rel="self" type="application/rss+xml"/><item><title>Building a Custom Ktor Plugin to Guard Authenticated Routes</title><link>https://thomaskioko.me/posts/declarative_auth_ktor_plugin_kmp/</link><pubDate>Wed, 18 Mar 2026 00:00:00 +0000</pubDate><guid>https://thomaskioko.me/posts/declarative_auth_ktor_plugin_kmp/</guid><description>In an earlier post, I set up HttpResponseValidator to intercept error responses and map them into a sealed ApiResponse type. That worked well for handling errors after they happen. This post goes a step further: preventing unauthorized requests from ever reaching the network using a Ktor Custom Plugin.
This handles errors after they occur. I am now preventing unauthorized requests from reaching the network using a Ktor Custom Plugin.
The Trakt API includes both public and authenticated endpoints.</description></item></channel></rss>