Beyond the Login Screen: Securing Session Tokens, JWTs, and Cookies After Authentication
The short version: store access tokens in JavaScript memory, put refresh tokens in HttpOnly/Secure/SameSite cookies, ro…
#csrf-protection
2 posts
Django Security Checklist for Production: I Ran It, Then I Attacked My Own Blog With It
Checklists are cheap to write and easy to ignore. Everyone's seen a "Django production checklist" blog post before — DE…