I Built an Angular Authentication Layer for the Signals Era
How I designed `ngx-auth-client` around reactive state, provider-agnostic authentication, functional guards, and safer token handling.
Aug 31, 2026
Implementing Passkey Authentication in NestJS and PostgreSQL
A code-first guide to adding WebAuthn passkey registration and login to a NestJS and PostgreSQL API: the schema, the service, the controller...
OAuth 2.0, OpenID Connect, and Keycloak: Understanding Modern Authentication
OAuth 2.0, OpenID Connect, JWT, access tokens, refresh tokens, Keycloak. These get mentioned in the same breath so often that they blur into...
Authentication in React: Buy It, and Where the Line Really Is
Authentication always starts as a login form. Two fields and a button. You could build that in an afternoon, and that afternoon is exactly t...
Sign in With Google in Node.js — Without Passport
Learn how to implement Google Sign-In in Node.js without Passport.js by building the complete OAuth 2.0 flow yourself. This guide covers PKC...
Four Ways a Refresh Token Request Fails — Only One Means Trouble
A refresh token system where every token is single-use and belongs to a token family. Invalid, expired, and revoked are routine. Reuse means...
JWT Authentication Done Right: The 2026 Security Playbook
Most JWT implementations have at least one critical security flaw. Algorithm confusion, token theft via XSS, missing expiry validation, impr...
REST API Design Best Practices Every Developer Should Know
A poorly designed API becomes technical debt the moment clients start depending on it. This guide covers practical REST API design patterns ...