Session Key Rotation: Why Valid Sessions Stop Working
Learn why HMAC session key rotation can break authentication during rolling deployments, and how to migrate fingerprints safely before retiring old keys.
4 posts, newest first.
Learn why HMAC session key rotation can break authentication during rolling deployments, and how to migrate fingerprints safely before retiring old keys.
How to introduce new credentials, coordinate consumers, and retire old dependencies safely, with HMAC tokens as a detailed case study.
Learn why unique authentication tokens can still be easy to guess, with a simple Python example. Part 1 of a beginner's guide to backend authentication tokens.
Build a 37-character random token in Python. Learn how secrets.choice, string.ascii_letters, range, and join work together, one step at a time.