Rate limiting algorithms: token bucket vs leaky bucket
Fixed and sliding windows, token and leaky buckets compared, where to enforce limits, distributed limits with Redis, and how to protect OTP, login and test submission.
#api security
3 articles tagged #api security
Articles
Is Base64 encryption? Why encoding isn't security
No: Base64 is a public, keyless encoding anyone can reverse. How it works, why 'Base64-encrypted' passwords, tokens and links leak, and what to use instead.
What is HMAC? Signing webhooks, links and API calls
HMAC proves a message is unaltered and came from a key holder. How HMAC-SHA256 works, verifying Razorpay and Cashfree webhooks, signing video links, and mistakes to avoid.
Upclass for institutes
Launch your academy. Keep every course safe.
Your courses, live classes and tests in your own branded app, with piracy protection on every lecture. Plans start at ₹1,999/month.