fastapi

Instrumentation: The price you pay for observability

In order to be observable, systems must report their own behavior. This article covers metrics, logs, context propagation and traces, and implementation using FastAPI with OpenTelemetry, Prometheus, and structlog.

jwt

Authentication Token Storage: JWT Bearer Tokens, Session Cookies, and JWT in HttpOnly Cookies

Token storage is a critical security choice. This article compares JWT bearer tokens, opaque session cookies, and JWTs in HttpOnly cookies—weighing revocation, XSS, and CSRF trade-offs—with FastAPI reference implementations for each.