Personal bulletins & occasional notes
~/blog
Every bulletin filed under Security, newest first.
A practical approach to securing ASP.NET Core APIs with clear identity boundaries, policy-based authorization, and safer defaults.