not_afraid·14h agoMy first incident: due to a Null Pointer ExceptionIn July 2025, I caused my first production incident. A NullPointerException, in code I wrote.
Bilalsarwar·22h agoStop Pasting Your JWT Into Random Websites Just to Read ItA 401 error appears in the logs, the access token is sitting in the request headers, and the quickest way to see what is inside it is to…
Aysha·22h agoHow Your API Knows Who You Are (and What You Can Do)Imagine opening an online shopping app. You log in, browse products, check your orders, and update your profile.
Rajni Kavathiya·1d agoA JWT That Expired a Minute Ago Still Returned 200: What I Hit on .NET 10A JWT that had expired a minute earlier still returned 200 from my API. Nothing was broken: the default ClockSkew gives every token five…
Muhammad Ali Mughal·1d agoJSON Web Token (JWT) Security Pitfalls: alg: none, Weak HMAC Secrets, and Client-Side Token…Disclosure: This article was written with AI assistance and reviewed and edited by the author. The cover and diagram images are…
Softinbit·2d agoIssuing and Validating JWT Access Tokens in ASP.NET CoreRegister users, log them in, and protect endpoints with signed 15-minute access tokens.
Ashish Vishwakarma·3d agoBreaking JWT Validation: How JSON Nulls, Python Booleans, and Unhandled Exceptions Bypass jwcryptoJSON Web Tokens (JWTs) are a cornerstone of modern authentication and authorization. However, securing a JWT implementation is notoriously…
Muhammad Kashif·Oct 28JWT Authentication: Structure, Attacks, and Why Weak Signature Validation Gets You PwnedJSON Web Tokens (JWT) are the backbone of authentication in modern APIs, single page applications, and microservice architectures. They are…
Ankitjain·Oct 28JWT Authentication in Node.js and Express: Complete Guide with MongoDBJWT Authentication in Node.js and Express: Complete Guide with MongoDB
Chirag Mehta·Oct 28Stop Storing JWTs in localStorage: React Auth with Refresh Tokens and httpOnly CookiesMost React auth tutorials, including some of my older ones, save the JWT in localStorage. It's easy, and it's risky. Any script that runs…
