PHP & React Development Insights

Practical insights and guides on PHP/Symfony, React/Next.js, legacy modernization, and software architecture, drawn from 18+ years of building web applications for European businesses.

API Security for B2B SaaS: Beyond OAuth and JWT

OAuth and JWT get you through the door of enterprise procurement—but they are not a security posture. This guide covers the controls that enterprise clients actually audit: rate limiting, IP allowlisting, API key rotation, audit logging, and tenant-scoped authorization.

Read more