The engineering notebook
RSS feed#security
Articles, practical guides, and engineering notes on security.
By Ashish Bhakhand 108 published articles
Explore the articles
6 articles
Reset filtersReliable Webhooks with Authentication, Deduplication, and Reconciliation
Turn provider callbacks into durable, idempotent state changes that remain correct across retries and delayed events.
Secure Storage and Shared Preferences Solve Different Problems
Choose the correct Flutter storage for tokens, preferences, onboarding flags, cached filters, and session-related data.
Strict JWT Validation Without Algorithm Confusion
Validate JWT algorithms, signatures, issuers, audiences, and required claims deliberately before trusting user identity.
Production FastAPI Middleware: Order Matters
Build request context, body limits, host checks, CORS, compression, and logging in an order that preserves reliable behavior.
Multi-Tenant Authorization Requires More Than Checking a JWT
Authentication proves identity. Safe multi-tenant APIs must also scope every resource query and action to the caller's organization.
Fail Fast with Pydantic Settings
Validate environment variables, production transport security, and operational limits once during startup.