Engineering2 min read
Refresh-token rotation under concurrent replay: 200 scheduled callersI sent 200 scheduled refresh attempts through one local token family. Only one issued a successor; multiple workers would need a different test.
Field notes / Journal / Build notes
Writing
Posts tagged #Session Recovery · 2 posts. All writing
2 posts
Archive
2026
Engineering4 min read
Mobile session recovery as an explicit state machineModel sign-in, refresh rotation, expiry, step-up recovery, and revocation without creating a hidden authentication bypass.
Prefer a feed? Subscribe via RSS.