May 7 · 9 min read · Authentication is a solved problem. Authorization is where things get complicated. Once you know who is making a request, how do you decide what they're allowed to do? At small scale, authorization is simple. An admin role gets full access, a viewer ...
Join discussionMay 2 · 9 min read · Every backend developer has written this line a thousand times: SELECT * FROM orders WHERE user_id = $1 And this one: DELETE FROM invoices WHERE id = \(2 AND user_id = \)1 And somewhere, deep in the
Join discussion
Apr 3 · 5 min read · Credit card authorization decisioning with streaming SQL means enriching every authorization request with live account state, spending velocity, and behavioral context in milliseconds — enabling issuers to approve more legitimate transactions, declin...
Join discussion
Apr 2 · 8 min read · We just shipped Authorizer v2 — a major rewrite of our open-source, self-hosted authentication and authorization server. If you've ever been frustrated by per-seat auth pricing, vendor lock-in, or shi
Join discussionMar 31 · 4 min read · In this tutorial, we’ll build a FastAPI authentication system with JWT tokens, role-based access (USER and ADMIN), and secure password hashing using Argon2. The backend will use MySQL. This project is
Join discussion
