Category · 125 articles

Security

The middleware pipeline: order matters, explained simply

.NET & ASP.NET CORE · DAY 006

The middleware pipeline: order matters, explained simply

Expona Admin · Oct 27, 2026 · 7 min read

JWT authentication in ASP.NET Core: a step-by-step guide

.NET & ASP.NET CORE · DAY 028

JWT authentication in ASP.NET Core: a step-by-step guide

Expona Admin · Oct 27, 2026 · 6 min read

Refresh token rotation in .NET: best practices explained

.NET & ASP.NET CORE · DAY 029

Refresh token rotation in .NET: best practices explained

Expona Admin · Oct 27, 2026 · 11 min read

Policy-based authorization: .NET lessons from production

.NET & ASP.NET CORE · DAY 030

Policy-based authorization: .NET lessons from production

Expona Admin · Oct 27, 2026 · 7 min read

Permission-based authorization: best practices explained

.NET & ASP.NET CORE · DAY 031

Permission-based authorization: best practices explained

Expona Admin · Oct 27, 2026 · 8 min read

Managing secrets in .NET: a hands-on guide for engineers

.NET & ASP.NET CORE · DAY 079

Managing secrets in .NET: a hands-on guide for engineers

Expona Admin · Oct 27, 2026 · 7 min read

Security headers and HTTPS: .NET lessons from production

.NET & ASP.NET CORE · DAY 080

Security headers and HTTPS: .NET lessons from production

Expona Admin · Oct 27, 2026 · 7 min read

CORS done right: what every .NET developer should know

.NET & ASP.NET CORE · DAY 081

CORS done right: what every .NET developer should know

Expona Admin · Oct 27, 2026 · 6 min read

Data protection and encryption: best practices explained

.NET & ASP.NET CORE · DAY 082

Data protection and encryption: best practices explained

Expona Admin · Oct 27, 2026 · 7 min read

DTOs that protect your API: patterns, pitfalls and fixes

NESTJS · DAY 008

DTOs that protect your API: patterns, pitfalls and fixes

Expona Admin · Oct 27, 2026 · 8 min read

JWT authentication with Passport: lessons from production

NESTJS · DAY 022

JWT authentication with Passport: lessons from production

Expona Admin · Oct 27, 2026 · 8 min read

Roles and permissions with decorators: a practical guide

NESTJS · DAY 024

Roles and permissions with decorators: a practical guide

Expona Admin · Oct 27, 2026 · 8 min read

Refresh tokens in NestJS: a hands-on guide for engineers

NESTJS · DAY 026

Refresh tokens in NestJS: a hands-on guide for engineers

Expona Admin · Oct 27, 2026 · 8 min read

NestJS security checklist: practical tips and trade-offs

NESTJS · DAY 074

NestJS security checklist: practical tips and trade-offs

Expona Admin · Oct 27, 2026 · 8 min read

Helmet in NestJS: a practical guide for developers

NESTJS · DAY 075

Helmet in NestJS: a practical guide for developers

Expona Admin · Oct 27, 2026 · 6 min read

Secrets and configuration in production, explained simply

NESTJS · DAY 076

Secrets and configuration in production, explained simply

Expona Admin · Oct 27, 2026 · 9 min read

Response serialization: a practical guide for developers

NESTJS · DAY 083

Response serialization: a practical guide for developers

Expona Admin · Oct 27, 2026 · 8 min read

Keep server code on the server: best practices explained

REACT & NEXT.JS · DAY 025

Keep server code on the server: best practices explained

Expona Admin · Oct 27, 2026 · 7 min read

Authentication in Next.js for React & Next.js developers

REACT & NEXT.JS · DAY 032

Authentication in Next.js for React & Next.js developers

Expona Admin · Oct 27, 2026 · 8 min read

Security in React apps: a practical guide for developers

REACT & NEXT.JS · DAY 084

Security in React apps: a practical guide for developers

Expona Admin · Oct 27, 2026 · 7 min read