Airbnb Cuts Authentication Code by 60% with Server Driven Architecture

Leela Kumili — Fri, 04 Sep 2026 14:30:00 GMT

Airbnb redesigned its authentication architecture around server driven flows and policy based challenge selection. The new Flexible Authentication system reduced authentication related code by 60%, cut the web client bundle by 100 KB, improved successful authentication by 2.6%, reduced duplicate account creation by 27%, and lowered OTP costs by 11%.

By Leela Kumili

Article: Eliminating Long-Lived Credentials in GCP with Workload Identity Federation

Shijin Nair — Mon, 31 Aug 2026 11:00:00 GMT

Long-lived GCP service account keys are secrets that must be managed forever, are hard to rotate, and are easy to leak. Scaling Workload Identity Federation to 120+ production projects shows why it changes how machine identity is approached entirely: keys are secrets to manage, federated identities are trust relationships configured once, gated by attribute conditions.

By Shijin Nair

InfoQ - Authentication

Airbnb Cuts Authentication Code by 60% with Server Driven Architecture

Article: Eliminating Long-Lived Credentials in GCP with Workload Identity Federation