Algorithms
Token Bucket Rate Limiting and Constant-Time Credential Verification
The small but sharp security machinery behind an API endpoint: in-memory token buckets, peppered SHA-256 with constant-time comparison, and deterministic session namespacing.
4 min read