#backend (2)
- Jul 16, 2026 1 min read Multi-tenant isolation with Postgres Row-Level Security Why I let the database enforce tenant boundaries instead of trusting every query to remember a WHERE clause.
- Jul 04, 2026 1 min read Refresh token rotation, and catching token theft Rotating refresh tokens on every use, grouping them into families, and revoking the whole family when an old one comes back.