JWT and Token Rotation
6 min
JWT is a lightweight way to carry claims, but it does not by itself answer every question an authentication system needs. We cover the short-access-token / long-refresh-token pattern, invalidation strategies, algorithm…
#security
Posts tagged security
Categories
AI & LLM
9AI/LLM topics — agents, prompts
Web Fundamentals
7HTML, CSS, JS, HTTP, URL basics
Languages
4TypeScript, Java, Python, Rust
Programming
4Data structures, Big-O, patterns
Frontend
18React, Next.js, Tauri, Tailwind
Backend
19Spring, FastAPI, SQL
Agent tooling
15Claude Code · MCP · Context7 · Figma — overview of AI coding tools
Cloud
22Deployment options and decision criteria
Data
20PostgreSQL · Kafka · data strategy notes
Infra
10Docker, Compose, Caddy, SSH
Environment
11Windows vs Mac and other dev-environment notes
Mobile
4Cross-platform options compared (Tauri · Flutter · RN)
Dev tools
12pnpm, uv, Gradle, Git, regex
Philosophy
10KISS · DRY · YAGNI · naming — development philosophy
Security concepts
9OAuth · JWT · security fundamentals
Quality / Tests
11Testcontainers, Vitest, pytest
Learning
6Searching, reading docs, debugging
Posts tagged security
IAM — Identity and Access Management
5 minEvery cloud call eventually passes through "who · what · where" questions. In AWS, the place that answers them is IAM (Identity and Access Management). Compared with the flashier managed services, IAM has a plain text-p…
Environment variables and secrets
5 min.env files and environment variables show up early for newcomers. This article covers their origins, behavior, and the tools used for secrets management — based on facts.