Security Jul 25, 2026 7 min read
API Request Signing Explained
Design HMAC API request signing in Java and Node.js with canonical requests, timestamps, nonces, replay defense, rotation, tests, and failure handling.
Tag
API Security
2 articles with this tag. Follow these related notes when you want a narrower study path.
API Design Jul 25, 2026 7 min read
OpenAPI Security Schemes Explained
Model bearer tokens, API keys, OAuth 2.0, and OpenID Connect in OpenAPI with Springdoc and Express examples, overrides, tests, and enforcement boundaries.