DBDibyadipan Bhattacharyaindibyadipan.hashnode.dev·6d ago · 5 min readBeyond the .env File: The OS Mechanics of Secret InjectionYou want to pass database credentials to a Node.js process without writing a .env file to disk. The standard advice is to inject the credentials directly into the environment. But how does that actual00
DBDibyadipan Bhattacharyaindibyadipan.hashnode.dev·6d ago · 5 min readSession Revocation and Replay Detection with RedisWhen a user clicks "Logout from all devices," you need to instantly invalidate every active session they have. If you built your authentication with purely stateless JWTs, you cannot do this. You have00
DBDibyadipan Bhattacharyaindibyadipan.hashnode.dev·6d ago · 7 min readDesigning a Secrets Manager Assuming the Database Will Be LeakedAssume the database is gone. An attacker just dumped Postgres. They have every ciphertext, every nonce, and every project salt. This is the baseline threat model for Vaultify. The system guarantees th00
