Case-Study Hub

Auth Architecture Case Studies

Real Clearview engagements where the auth layer needed more than atutorial-shaped solution: a JWT audience map as a defence-in-depthlayer behind CORS, signed tokens for zero-login email unsubscribe,a CloudFront custom-error page that leaked JWTs to an S3 origin,and silent SSO across two portals on the same parent domain with aper-user logout barrier. Each post is buyer-shaped: what broke, whatwe shipped, and what the auth surface looked like after.

Essays
3
Contributors
2
First filed
Jul 2026
Latest
Aug 2026
Written by NH AP
  1. aws

    How a CloudFront Custom Error Page Leaked JWTs to S3: A Case Study

    CloudFront custom-error rule forwarded the Authorization header to S3. Two-line Terraform fix.

    12 min
  2. email

    Implementing a Zero Auth Unsubscribe Link on Your Email

    Signed token in the URL so users unsubscribe without logging in.

    6 min
Type to search. to navigate. Enter to open. Esc to close.