Insights, tutorials, and best practices for application security, authentication, and modern development workflows.
Digest Authentication provides stronger protection than Basic Auth by hashing credentials with a nonce. This post shows how to implement HTTP Digest Auth in FastAPI using a lightweight custom middleware.
Learn how to issue and verify HMAC-signed JWTs (HS256) in FastAPI — including token creation, expiration handling, protected routes, and best practices for secure secret management.
Learn how to add Basic HTTP Authentication to FastAPI endpoints using HTTPBasic, secure password comparison, and proper use of WWW-Authenticate headers.
Join our waitlist and get the latest posts delivered right to your inbox. No spam, unsubscribe at any time.
Join the waitlist to get early access to the private beta. No spam, ever.