Security

Security concepts and practical patterns every developer on the team should know.

Topics in this section

• OWASP Top 10 — what they are and how to prevent them
• Authentication vs authorisation
• JWT — what they are, what they're not, common mistakes
• Secrets management (never in code)
• Dependency vulnerability scanning

This section is growing. Contribute an article if you know something worth sharing.