Rate Limiting Your Next.js API Routes
Stop worrying about API abuse. Here is how to implement rate limiting correctly.
Back to Blog
Archive
API Security
A curated collection of thoughts, tutorials, and insights related to API Security.
Securing APIs With JWT and Refresh Tokens
Learn to manage JWTs and refresh tokens for secure API authentication.
Implementing OIDC From Scratch Is Hard
Why you should avoid manual OIDC implementation and when you might actually try.
Why Mutual TLS Is Really Hard
A blunt look at the operational pain of managing mTLS for developers.
Stop Hardcoding API Keys Right Now
Stop hardcoding secrets. Use environment variables and proper key management tools.
Demystifying SSL Certificate Chains for Developers
Stop guessing how TLS certificates work and learn the chain of trust.
OAuth 2.0 Flows: Visualizing The Difference
I break down OAuth 2.0 flows visually to help you choose the right one.
Token vs. Session Auth: Which is Best?
Comparing token-based and session-based authentication for your web applications.
Explore other topics
Need to Message Me?
Let's Talk!