<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://authbyexample.hashnode.dev</loc>
    <lastmod>2026-09-25T08:32:10.136Z</lastmod>
    <changefreq>always</changefreq>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://authbyexample.hashnode.dev/audit-logging-is-not-authorization</loc>
    <lastmod>2026-09-25T06:57:40.898Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://authbyexample.hashnode.dev/list-access-is-not-item-access</loc>
    <lastmod>2026-09-24T17:09:48.529Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://authbyexample.hashnode.dev/oauth-on-mcp-is-not-the-same-as-authorizing-each-tool-call</loc>
    <lastmod>2026-09-24T13:43:08.687Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://authbyexample.hashnode.dev/write-permission-is-not-delete-permission</loc>
    <lastmod>2026-09-24T12:52:04.445Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://authbyexample.hashnode.dev/sso-success-is-not-resource-authorization</loc>
    <lastmod>2026-09-24T08:11:06.018Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://authbyexample.hashnode.dev/logged-in-is-not-authorized</loc>
    <lastmod>2026-09-23T17:05:53.418Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://authbyexample.hashnode.dev/batch-endpoints-still-need-per-item-authorization</loc>
    <lastmod>2026-09-23T11:55:33.866Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://authbyexample.hashnode.dev/rate-limits-are-not-authorization</loc>
    <lastmod>2026-09-23T07:29:22.360Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://authbyexample.hashnode.dev/feature-flags-are-not-authorization</loc>
    <lastmod>2026-09-22T16:58:10.653Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://authbyexample.hashnode.dev/authorize-before-the-expensive-work-starts</loc>
    <lastmod>2026-09-22T12:07:30.338Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://authbyexample.hashnode.dev/hmac-on-a-webhook-is-not-authorization-for-the-side-effects</loc>
    <lastmod>2026-09-22T07:34:26.586Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://authbyexample.hashnode.dev/an-upsert-still-needs-create-and-update-checks</loc>
    <lastmod>2026-09-21T17:14:58.315Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://authbyexample.hashnode.dev/a-background-job-still-needs-a-subject</loc>
    <lastmod>2026-09-21T12:19:00.153Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://authbyexample.hashnode.dev/tenant-filters-on-list-are-useless-if-get-by-id-skips-them</loc>
    <lastmod>2026-09-21T07:43:55.265Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://authbyexample.hashnode.dev/a-client-supplied-resource-id-is-not-a-permission</loc>
    <lastmod>2026-09-20T16:50:02.872Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://authbyexample.hashnode.dev/a-feature-flag-is-not-an-authorization-check</loc>
    <lastmod>2026-09-20T11:23:11.152Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://authbyexample.hashnode.dev/logged-in-is-not-a-permission</loc>
    <lastmod>2026-09-20T05:58:23.561Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://authbyexample.hashnode.dev/fail-closed-when-authorization-is-unavailable</loc>
    <lastmod>2026-09-19T15:18:25.096Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://authbyexample.hashnode.dev/temporary-elevation-needs-a-clock</loc>
    <lastmod>2026-09-19T10:43:35.983Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://authbyexample.hashnode.dev/scope-tokens-to-the-action-not-the-identity</loc>
    <lastmod>2026-09-19T06:55:32.399Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://authbyexample.hashnode.dev/invalidate-sessions-when-privileges-change</loc>
    <lastmod>2026-09-18T16:43:00.163Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://authbyexample.hashnode.dev/temporary-elevation-beats-permanent-admin</loc>
    <lastmod>2026-09-18T07:21:39.601Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://authbyexample.hashnode.dev/deny-reasons-beat-silent-403s</loc>
    <lastmod>2026-09-17T15:55:34.519Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://authbyexample.hashnode.dev/archive</loc>
    <lastmod>2026-09-25T08:32:10.136Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.5</priority>
  </url>
  <url>
    <loc>https://authbyexample.hashnode.dev/recommendations</loc>
    <lastmod>2026-09-25T08:32:10.136Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.4</priority>
  </url>
</urlset>