Showing posts with the label API Security

Redis Rate Limiting: Por qué Fixed Window falló y la solución con Lua

Post a Comment
Hace dos semanas, nuestro sistema de notificaciones push sufrió una caída parcial crítica. Los dashboards de Datadog mostraban una latencia disparada a 3 segundos en el microservicio de autenticaci…
Redis Rate Limiting: Por qué Fixed Window falló y la solución con Lua

OAuth 2.0 및 OIDC 아키텍처 심층 분석과 JWT 보안 전략

Post a Comment
Access-Control-Allow-Origin: * 설정만큼이나 위험한 것이 잘못 구현된 인증 로직입니다. 특히 SPA(Single Page Application)나 모바일 앱 환경에서 레거시 방식인 Implicit Grant Flow를 여전히 사용하고 있거나, Access Token을 LocalStorage에 평문으로 저장하여 XSS(Cross…
OAuth 2.0 및 OIDC 아키텍처 심층 분석과 JWT 보안 전략

OAuth 2.0 and OIDC Architecture for High-Security Distributed Systems

Post a Comment
Consider a scenario where a microservices-based banking application experiences a subtle account takeover. The access logs show legitimate tokens signed by the correct private key, yet the user den…
OAuth 2.0 and OIDC Architecture for High-Security Distributed Systems

OWASP API Top 10 Engineering Defense

Post a Comment
T he shift toward microservices and decoupled architectures has fundamentally altered the attack surface of modern applications. Unlike traditional monoliths where server-side rendering dominated, A…
OWASP API Top 10 Engineering Defense
OlderHomeNewest