Filed under
Authentication & security
Practical guidance on authentication, session design, abuse prevention and accountable product engineering.
Articles
Passwordless authentication with a BFF: keep sessions out of browser JavaScript
Server-side CAPTCHA validation: how to prove your bot check protects the request
Server-side identity rendering: remove the signed-in loading state without weakening access control
React SPA to Next.js: when moving authentication to the server is worth it
Ready when you are