Rrathsarainrr-cyber.hashnode.dev·1d ago · 15 min readIdentity Foundations: Everything Before OAuthBefore any protocol makes sense on its own terms, a few things underneath it need to be settled first: what authentication and authorization actually are as distinct concepts, how identity gets carrie00
MHMuiz Harunaindevdesiignn.hashnode.dev·2d ago · 4 min readWeb Security: Understanding JWTJWT: JSON Web Token JWT is a standard for safely passing claims, pieces of information or assertions made about a subject, in a space-constrained environment. Its key features are compactness, simplic10
SSshouvik sarkarinsarkarshouvik.hashnode.dev·2d ago · 12 min readJWT Authentication ExplainedHey there brilliant developers. Hope you’re learning and building something new every day. Did you know that HTTP is stateless? Since Express is built on top of HTTP, it is stateless too. But what doe00
JTJAY TANKinjaytank.hashnode.dev·5d ago · 9 min read The JWT function everyone mistakes for a security checkLet me hand you a valid-looking token and an app that trusts it. // The endpoint that decides who you are on every request. function currentUser(req) { const claims = jwt.decode(req.headers.authoriz00
ARAlok Rajinnode-js.hashnode.dev·Jul 31 · 6 min readThe Silent Passport: Understanding JWT AuthenticationThere is a strange loneliness in the internet. Every request arrives at a server as though it has never existed before. A browser may have visited a thousand times, logged in moments ago, purchased pr00
ARAlok Rajinnode-js.hashnode.dev·Jul 31 · 6 min readSessions vs Cookies vs JWT: How the Internet Remembers Who You AreImagine waking up every morning and having to prove your identity to everyone you meet—your family, coworkers, the cashier, even your best friend. It would be exhausting. Computers face the same chall00
TTooleraxinsrshohan.hashnode.dev·Jul 30 · 6 min readWhat Is a JWT? JSON Web Tokens Explained SimplyIf you have ever inspected a web request and seen a long string of gibberish split by two dots, you have met a JSON Web Token. JWTs are how a huge share of the modern web handles "this user is logged 00
MPMichał Piszczekinpiszczek.hashnode.dev·Jul 28 · 21 min readToken Revocation Is Not an EndpointI recently wrote a sentence I need to correct: “DPoP stops replay. The gap most teams miss is revocation lag once the token walked.” The second half points at a real problem. The first half is too loo00
AAAseem Aggawralinaseemtech.hashnode.dev·Jul 28 · 9 min read06 - Authentication in FastAPI: Register, Login, JWT, and Protected Routes📌 GitHub Repository: AI Engineer Foundation Authentication is one of the most important parts of backend development. Before adding advanced AI features, I wanted to understand how users register, lo00
ANakshay Nikhareinakshaynikhare.hashnode.dev·Jul 24 · 5 min readThe x-tenant-id Pattern: Multi-Tenant API Without Multi-Tenant ComplexityWhen you're building a multi-tenant SaaS, the first architectural question is usually: how do you keep tenant data isolated? The options range from separate databases per tenant (maximum isolation, ma00
