May 18 · 4 min read · Web applications and APIs that prefer server-side session management instead of exposing OAuth tokens to the frontend should use cookie-based authentication. Cookie authentication preserves an authent
Join discussionMay 1 · 4 min read · We recently migrated a .NET Core application from .NET 8 to .NET 10 and moved its hosting model from AWS Lambda to ECS. The service acts as a wrapper around a downstream API that reads and updates cli
Join discussionApr 12 · 16 min read · A note on the code in this article. The implementation shown here is derived from a production BFF built for a Norwegian enterprise education platform. Service names, domain models, and certain struct
Join discussion
Apr 6 · 10 min read · There is a file in almost every .NET project that everyone on the team is quietly afraid of. It does not have a scary name. It is usually called something harmless like ProductService.cs or OrderServi
Join discussionMar 21 · 5 min read · At some point, most frontend teams hit the same wall. The backend exposes what it knows — resources, entities, service boundaries — and the frontend is left stitching four API calls into a single scre
Join discussion
Jan 24 · 3 min read · Row Level Security (RLS) is PostgreSQL's built-in feature for controlling which rows users can access in database tables. Instead of granting access to entire tables, RLS applies automatic filters at the row level, creating invisible WHERE clauses th...
Join discussion
