Search for a command to run...
Articles tagged with #authentication
Invalid, expired, revoked, and reused tokens aren't the same. Build real refresh token reuse detection in NestJS + Postgres—and verify it revokes only the compromised session.
Build Google OAuth from first principles using PKCE, state validation, secure token exchange, refresh tokens, and JWT sessions in Node.js—without Passport.js or authentication libraries.
A practical, code-first guide to adding WebAuthn passkey registration and login to NestJS with PostgreSQL, covering credential storage, challenge handling, security, and production hardening.
