Flipping the auth provider without logging everyone out
Changing identity providers is a one-way door if you get the order wrong. A checklist for cutting over with a live fallback and a real rollback.
← All tags
Tag
Security
Notes tagged Security
La redacción de logs no es un checkbox
Un patrón de redacción como *.campo no siempre cubre lo que creés. Cómo mantener datos sensibles fuera de los logs en serio, y no solo en apariencia.
Every string from the outside needs a maximum length
An unbounded string field on an unauthenticated endpoint is a bug. But the fix has a failure mode that can reject perfectly valid requests.