All tags / #authentication

#authentication

2 posts

One-line session auth, and the three bugs you won't find the hard way

Peter Amiri September 3, 2026

The enableSession() facade is one line of config. But the real story is the three subtle bugs it exists to prevent — the ones that only surface after the second deploy, or only on a reload, or only for a user who was already logged in. Here's what happens when the wiring goes right.

#wheels-4
#authentication
#dependency-injection

One Authenticator, Three Doors: Sessions, Tokens, and JWTs in Wheels 4

Peter Amiri July 10, 2026

Wheels 4 ships session, API-token, and JWT authentication as pluggable strategies behind one Authenticator registry. Wiring up all three doors — with the sharp edges: private filters, dynamic finders, the 32-byte JWT secret minimum, and the inline-closure constructor that crashes Adobe ColdFusion.

#wheels-4
#authentication
#security
#jwt

#authentication

One-line session auth, and the three bugs you won't find the hard way

One Authenticator, Three Doors: Sessions, Tokens, and JWTs in Wheels 4

Newsletter