Building Aegis2FA: Enterprise 2FA Without Vendor Lock-in
How I built a production-ready two-factor authentication service that saves businesses $1,188/year while maintaining enterprise-grade security.
Technical writing about backend development, architecture, and lessons learned
How I built a production-ready two-factor authentication service that saves businesses $1,188/year while maintaining enterprise-grade security.
Learn how to implement stateless JWT authentication with refresh tokens, automatic rotation, and proper security measures for production apps.
Complete guide to implementing Time-based One-Time Password authentication with proper security, clock drift handling, and QR code generation.
An introduction to this technical blog and what you can expect to find here.
Deep dive into password hashing algorithms, comparing bcrypt, scrypt, and Argon2. Learn why Argon2id won the Password Hashing Competition and how to implement it correctly.
Implement production-grade rate limiting, CSRF protection, and security headers to protect your Node.js API from attacks.
Complete testing guide covering unit tests, integration tests, and E2E tests. Learn how I achieved 80%+ coverage and caught critical bugs before production.
Complete guide to deploying a Node.js app with Docker, PostgreSQL, and Redis using free tier services. Includes Docker Compose, health checks, and monitoring.