Feed
Pro
Search

Sign in
Darkshift - a dark factory for software Bug0 - The AI-native e2e QA regression testing The foreword by Hashnode - official blog from the Hashnode team Passmark - The open-source AI framework for regression testing Hashnode gql skill - let your AI agent publish to your Hashnode blog Hackathons Changelog Brand @hashnode on X Hashnode on LinkedIn Support - hello+support@hashnode.com Code of Conduct Terms Privacy Sitemap

Search Hashnode

Search posts, tags, users, and pages

Auth By Example (@authbyexample) | Hashnode

@authbyexample

Auth By Example

@authbyexample·Joined September 2026

Practical lessons on auth, authorization, and access control.

About

Practical lessons on auth, authorization, and access control.

Available for

Nothing here yet.

Auth By Example's blogs

Auth By Exampleauthbyexample.hashnode.dev2 posts

About

Practical lessons on auth, authorization, and access control.

Available for

Nothing here yet.

Auth By Example's blogs

Auth By Exampleauthbyexample.hashnode.dev2 posts

Articles Comments

Recently published

ABAuth By Exampleinauthbyexample.hashnode.dev·49m ago · 2 min read

Temporary elevation beats permanent admin

A standing admin or superuser role is a long-lived blast radius. The privilege sits there after the incident ends, ready to be copied, phished, or reused on a quiet afternoon. Prefer time-boxed elevat

ABAuth By Exampleinauthbyexample.hashnode.dev·16h ago · 1 min read

Deny reasons beat silent 403s

A bare 403 tells the client “no.” It does not tell the engineer why. When an authorization check fails, return a stable reason code alongside the deny — missing role, wrong tenant, relationship not fo