Auth Engineering
Deep Dives

Technical explorations on authentication, identity, and security engineering. Real-world patterns from building auth systems at scale.

All Topics💻Architecture🛡️Authentication☁️DevOps🔐OAuth & OIDC🔒Security
FeaturedAuthentication

Why Your SSO Implementation Is Probably Broken

The 5 most common SSO mistakes I see in Series A startups - and how to fix them before your next enterprise deal.

8 min read
🛡️Authentication

Token Refresh Patterns That Actually Scale

How to implement refresh tokens without creating a thundering herd problem or security vulnerabilities.

6 min read
🔒Security

RBAC vs ABAC: Choosing the Right Authorization Model

A practical guide to choosing the right authorization model for your application - with real implementation examples.

7 min read
🔐OAuth & OIDC

Securing Your OAuth Callback Endpoint

The callback URL is the most attacked endpoint in any OAuth implementation. Here's how to harden it.

5 min read
☁️DevOps

Building a Zero-Downtime Auth Migration

How to migrate from one auth system to another without logging out a single user or causing any downtime.

6 min read
💻Architecture

Designing Auth for Multi-Tenant SaaS

Tenant isolation, cross-tenant access, and the architectural patterns that make multi-tenant auth work.

7 min read

More coming soon

New posts on auth patterns, security, and identity engineering.