Security Jul 25, 2026 7 min read
API Request Signing Explained
Design HMAC API request signing in Java and Node.js with canonical requests, timestamps, nonces, replay defense, rotation, tests, and failure handling.
Tag
Node.js
3 articles with this tag. Follow these related notes when you want a narrower study path.
Authentication Jul 25, 2026 7 min read
OAuth Authorization Code Flow Explained
Implement OAuth Authorization Code with PKCE safely in Spring Security and Node.js, including state, callbacks, token exchange, tests, and mistakes.
Authentication Jul 25, 2026 7 min read
Password Reset Token Best Practices
Build secure single-use password reset tokens in Spring Boot and Node.js with random generation, hash storage, expiry, rate limits, tests, and auditing.