How to Defend GraphQL APIs Against Excessive Query Complexity
How to Defend GraphQL APIs Against Excessive Query Complexity is a security design problem that matters for real backend systems rather than only for...
Search
142 results for "Authentication"
Secure Password Reset Flows for Modern Web Applications
Secure Password Reset Flows for Modern Web Applications is a security design problem that matters for real backend systems rather than only for demonstrations....
How to Prevent SSRF in Backend URL Fetching Services
How to Prevent SSRF in Backend URL Fetching Services is a security design problem that matters for real backend systems rather than only for demonstrations....
Zero Trust Principles for Internal Service to Service APIs
Zero Trust Principles for Internal Service to Service APIs calls for a defensible security design, not a collection of unchecked configuration examples....
How to Implement Security Headers Without Breaking Modern Web Apps
How to Implement Security Headers Without Breaking Modern Web Apps is a critical defensive design choice for engineers responsible for applications that...
How to Secure Webhook Endpoints With Signatures and Replay Protection
How to Secure Webhook Endpoints With Signatures and Replay Protection is a critical defensive design choice for engineers responsible for applications that...
CSRF Protection for Cookie Based Single Page Applications
CSRF Protection for Cookie Based Single Page Applications is a critical defensive design choice for engineers responsible for applications that process real...
How to Design Rate Limiting for Multi Tenant Public APIs
How to Design Rate Limiting for Multi Tenant Public APIs is a critical defensive design choice for engineers responsible for applications that process real...
TLS Certificate Validation Best Practices for Backend HTTP Clients
TLS Certificate Validation Best Practices for Backend HTTP Clients is a critical defensive design choice for engineers responsible for applications that...