Blog
Notes on software development, tooling, and building things on the web.
Learn JWT authentication for full-stack apps: short-lived access tokens, refresh token rotation, secure client storage, and true token revocation.
