DBDibyadipan Bhattacharyaindibyadipan.hashnode.dev·Jun 20 · 5 min readBeyond the .env File: The OS Mechanics of Secret InjectionYou want to pass database credentials to a Node.js process without writing a .env file to disk. The standard advice is to inject the credentials directly into the environment. But how does that actual10
DBDibyadipan Bhattacharyaindibyadipan.hashnode.dev·Jun 20 · 5 min readSession Revocation and Replay Detection with RedisWhen a user clicks "Logout from all devices," you need to instantly invalidate every active session they have. If you built your authentication with purely stateless JWTs, you cannot do this. You have10
DBDibyadipan Bhattacharyaindibyadipan.hashnode.dev·Jun 20 · 7 min readDesigning a Secrets Manager Assuming the Database Will Be LeakedAssume the database is gone. An attacker just dumped Postgres. They have every ciphertext, every nonce, and every project salt. This is the baseline threat model for Vaultify. The system guarantees th10
