Every article

Newest first, grouped by year. Search or filter by topic.

388 articles
·
2 matching

Filter by topic All .NET AI Engineering Architecture Azure & DevOps Data Warehousing Engineering Practice Microservices Web APIs identity × View Cards List

Microservices 05 Jan 2026

Identity in Fifteen Files

Pacco's Identity service fits its whole auth machinery - JWT issuance, a refresh-token aggregate, Redis deny-list revocation - in about fifteen files, and most of them are right. The three that aren't teach more - a mapper bug that leaves 202 callers polling forever, a dead password check, and a refresh token that never rotates.

Microservices 02 Jan 2026

Security Theatre and Security Reality

Pacco names every control - JWT validation, a Vault, a log scrub-list, admin-only routes - and then a sign-up body chooses its own role, the signing key lives in every repo, Vault is off in Docker and anonymous callers pass every ownership check. A governance read of which shortcuts survive copy-paste.