Are Passkeys a Trap? Fact-Checking a Viral Warning
A Substack post tells everyone to avoid passkeys. I checked it against the specs, vendor docs and NIST guidance. The lock-in worry is real, ...
Oct 12, 2026
4 min
Stop Logging Out Innocent Users: Building Production Refresh Token Rotation with Token Family Revocation in Redis
Naive refresh token rotation causes race conditions that randomly log out legitimate users across multiple tabs. Learn how to architect atom...
Oct 2, 2026
12 min
I Built an Angular Authentication Layer for the Signals Era
How I designed `ngx-auth-client` around reactive state, provider-agnostic authentication, functional guards, and safer token handling.
Aug 31, 2026
16 min
Implementing Passkey Authentication in NestJS and PostgreSQL
A code-first guide to adding WebAuthn passkey registration and login to a NestJS and PostgreSQL API: the schema, the service, the controller...
Aug 27, 2026
10 min
OAuth 2.0, OpenID Connect, and Keycloak: Understanding Modern Authentication
OAuth 2.0, OpenID Connect, JWT, access tokens, refresh tokens, Keycloak. These get mentioned in the same breath so often that they blur into...
Aug 7, 2026
10 min
Authentication in React: Buy It, and Where the Line Really Is
Authentication always starts as a login form. Two fields and a button. You could build that in an afternoon, and that afternoon is exactly t...
Jul 30, 2026
7 min
Sign in With Google in Node.js — Without Passport
Learn how to implement Google Sign-In in Node.js without Passport.js by building the complete OAuth 2.0 flow yourself. This guide covers PKC...
Jul 18, 2026
8 min
Four Ways a Refresh Token Request Fails — Only One Means Trouble
A refresh token system where every token is single-use and belongs to a token family. Invalid, expired, and revoked are routine. Reuse means...
Jul 7, 2026
7 min
JWT Authentication Done Right: The 2026 Security Playbook
Most JWT implementations have at least one critical security flaw. Algorithm confusion, token theft via XSS, missing expiry validation, impr...
Jun 11, 2026
12 min