Tag: #session
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 9 posts
9 posts are tagged #session; the most recent was published on 2026-08-09.
Often tagged together: #security 6 #authentication 4 #2026-03 3 #jwt 3 #oauth2 3
Most read in the last 90 days:
Your Deploy Is the Load Test — What Happens When Nobody Designs the Cost of Seeding the Cache
A walk through how Canva moved the in-memory session revocation cache in its gateway from MySQL to S3. The problem was not the steady-state lookup cost but the startup cost of hundreds of pods seeding their caches simult
2026-08-09 · 8 min read #architecture#caching#s3#scalability#deploymentJWT or Sessions, and When — Settling the Authentication Choice by Asking Where the State Lives
The difference between JWT and sessions is not encryption or performance. It is one question: does authentication state live on the server or on the client? From that choice follows the fundamental weakness of JWT, the i
2026-07-26 · 13 min read #web#jwt#session#authentication#securityThe Hard Problem of Single Logout (SLO) — Designing Front-Channel and Back-Channel Logout
In SSO, logout is harder than login. This post covers the three-layer session model, how OIDC RP-Initiated/Front-Channel/Back-Channel Logout work and where they fail, the logout token JWT structure, the realistic failure
2026-06-12 · 17 min read #sso#oidc#saml#keycloak#logoutRefresh Token Rotation and Session Management — Designing a Theft-Resistant Token Lifecycle
From access/refresh token lifetime design principles to rotation, reuse detection, and token family invalidation — we design a token lifecycle that assumes theft. We cover the three-layer model of IdP, app, and SSO sessi
2026-06-12 · 16 min read #oauth2#session#keycloak#security#ssoSecure Messaging in 2026 — Signal / Matrix Element X / SimpleX / Session / Briar / MLS RFC 9420 Deep Dive ♪ Listenable
In the spring of 2026, secure messaging no longer fits in one sentence. Signal remains the gold standard, now reinforced by Meredith Whittaker after the September 2024 board reshuffle and by PQXDH for post-quantum forwar
2026-05-16 · 29 min read #privacy#messaging#signal#matrix#element-xOAuth 2.0 & Authentication Complete Guide 2025: JWT, Sessions, SSO, OIDC, Passkey
Everything about web authentication! OAuth 2.0 flows (Authorization Code/PKCE/Client Credentials), JWT (structure/verification/Refresh Token), Session vs Token, SSO (SAML/OIDC), Passkey (WebAuthn/FIDO2), Social Login, Se
2026-03-25 · 22 min read #oauth2#authentication#jwt#session#ssoOAuth2 & JWT Complete Guide: Everything About Authentication and Authorization for Developers ♪ Listenable
Everything about OAuth2 and JWT with practical code! Authorization Code/PKCE/Client Credentials flows, JWT structure and signature verification, Access/Refresh Token strategies, Session vs Token comparison, OIDC, securit
2026-03-23 · 23 min read #oauth2#jwt#authentication#authorization#securityRedis Complete Guide 2025: Caching Strategies, Data Structures, Pub/Sub, and Redis Stack
Everything about Redis! 5 data structures, caching patterns (Cache-Aside/Write-Through/Write-Behind), Pub/Sub, Redis Streams, Redis Stack (JSON/Search/TimeSeries), Lua scripting, Cluster architecture, and interview quest
2026-03-23 · 19 min read #redis#caching#data-structures#pubsub#redis-stackConcurrent Login Prevention Implementation Guide — Layer-by-Layer Strategies with IP, Session, JWT, and Nginx Including Practical Code
A comprehensive guide covering concurrent (duplicate) login control through IP-based, session-based, JWT-based, and Nginx-level approaches — with architecture, pros/cons, practical code, and operational checklists all in
2026-03-08 · 13 min read #architecture#security#authentication#session#nginx