Secure Patterns

OAuth Token Storage: Securing Third-Party Credentials in Multi-Tenant SaaS

A secure pattern for storing, refreshing, and using customer OAuth credentials

Designing API Idempotency Keys to Prevent Duplicate Writes

How to prevent duplicate writes, partial-failure bugs, and replayed side effects

Threat Modeling RAG Access Control

A practical threat model for tenant isolation, ACL propagation, revocation, and query-time filtering

Secure Webhook Delivery: Signing, Verification, and SSRF Prevention

A practical pattern for sender controls, receiver verification, and outbound request safety

The AI Agent Attack Surface: Tools, Loops, and Memory

Threat models and safe defaults for tool execution, autonomous loops, and persistent memory in AI agents

Passkey Authentication: Architecting a Secure Relying Party