Auth Architecture Case Studies
Real Clearview engagements where the auth layer needed more than atutorial-shaped solution: a JWT audience map as a defence-in-depthlayer behind CORS, signed tokens for zero-login email unsubscribe,a CloudFront custom-error page that leaked JWTs to an S3 origin,and silent SSO across two portals on the same parent domain with aper-user logout barrier. Each post is buyer-shaped: what broke, whatwe shipped, and what the auth surface looked like after.
- Essays
- 3
- Contributors
- 2
- First filed
- Jul 2026
- Latest
- Aug 2026
Start with these
-
Start here
How a JWT Audience Map Saved a CORS Mistake: A Defense-in-Depth Case Study
JWT audience map as a second control layer that turned a CORS HIGH into a MEDIUM.
The rest of the catalog
-
aws
How a CloudFront Custom Error Page Leaked JWTs to S3: A Case Study
CloudFront custom-error rule forwarded the Authorization header to S3. Two-line Terraform fix.
-
email
Implementing a Zero Auth Unsubscribe Link on Your Email
Signed token in the URL so users unsubscribe without logging in.
No essays match that search.