Engineering
4 articles filed under engineering.
- How to generate an API client ID and client secret A client ID names an application and a client secret proves it. How long each should be, which format to use, why prefixes help, and how to store and hand over the secret safely. Engineering
- How to decode and verify a JWT A JWT is readable by anyone who holds it, and trustworthy only once its signature checks out. How the three parts work, what the claims mean, why signatures fail, and how to handle tokens safely. Engineering
- Link previews are eating your one-time secrets Slack, Teams and Outlook fetch every URL you paste. So do mail scanners. Here is what that does to a view counter, and the fix. Engineering
- Deleting is not the same as forgetting A row disappearing from a table is the easy part. Backups, replicas and write-ahead logs are where permanent deletion usually turns out to be a figure of speech. Engineering