https://authbyexample.hashnode.dev 2026-10-08T09:58:14.148Z always 1.0 https://authbyexample.hashnode.dev/deactivating-a-user-should-shut-off-their-api-tokens-too 2026-10-08T05:43:23.691Z daily 0.8 https://authbyexample.hashnode.dev/assigning-a-task-should-check-that-the-assignee-can-see-it 2026-10-07T09:44:06.786Z daily 0.8 https://authbyexample.hashnode.dev/an-api-key-shouldn-t-carry-its-creator-s-whole-role 2026-10-07T05:37:03.570Z daily 0.8 https://authbyexample.hashnode.dev/an-activity-feed-needs-the-same-access-check-as-the-records-it-mentions 2026-10-06T11:46:24.402Z daily 0.8 https://authbyexample.hashnode.dev/editing-a-comment-needs-an-author-check-too 2026-10-06T10:09:32.132Z daily 0.8 https://authbyexample.hashnode.dev/check-that-the-recipient-can-read-the-record-before-you-send-the-notification 2026-10-06T07:37:37.501Z daily 0.8 https://authbyexample.hashnode.dev/your-search-index-is-a-second-copy-of-your-data-so-it-needs-the-same-permissions 2026-10-05T10:42:09.637Z daily 0.8 https://authbyexample.hashnode.dev/an-api-key-is-not-a-user-so-give-it-its-own-permissions 2026-10-05T09:13:51.945Z daily 0.8 https://authbyexample.hashnode.dev/a-batch-endpoint-must-authorize-every-item-not-just-the-first 2026-10-05T06:11:16.000Z daily 0.8 https://authbyexample.hashnode.dev/a-feature-flag-cohort-is-not-authorization 2026-10-04T12:13:54.023Z daily 0.8 https://authbyexample.hashnode.dev/a-spa-route-guard-is-not-server-authorization 2026-10-04T11:13:48.926Z daily 0.8 https://authbyexample.hashnode.dev/a-samesite-cookie-flag-is-not-authorization 2026-10-04T06:09:24.643Z daily 0.8 https://authbyexample.hashnode.dev/a-waf-rule-is-not-authorization 2026-10-03T13:41:33.327Z daily 0.8 https://authbyexample.hashnode.dev/an-ip-allowlist-is-not-authorization 2026-10-03T10:10:37.653Z daily 0.8 https://authbyexample.hashnode.dev/an-object-storage-acl-is-not-application-authorization 2026-10-03T07:45:21.662Z daily 0.8 https://authbyexample.hashnode.dev/a-trusted-identity-header-is-not-an-authorization-decision 2026-10-02T10:14:16.246Z daily 0.8 https://authbyexample.hashnode.dev/a-cdn-cache-key-is-not-an-authorization-decision 2026-10-02T08:39:32.931Z daily 0.8 https://authbyexample.hashnode.dev/a-search-index-hit-is-not-an-authorization-decision 2026-10-02T06:17:18.528Z daily 0.8 https://authbyexample.hashnode.dev/a-rate-limit-is-not-an-authorization-decision 2026-10-01T12:48:01.910Z daily 0.8 https://authbyexample.hashnode.dev/a-websocket-reconnect-is-not-a-standing-authorization-grant 2026-10-01T10:43:44.754Z daily 0.8 https://authbyexample.hashnode.dev/a-cached-authorization-decision-is-not-a-standing-grant 2026-10-01T06:19:10.786Z daily 0.8 https://authbyexample.hashnode.dev/mfa-step-up-is-not-object-authorization 2026-09-30T11:14:25.050Z daily 0.8 https://authbyexample.hashnode.dev/a-magic-link-is-not-a-forever-permission-grant 2026-09-30T08:56:59.919Z daily 0.8 https://authbyexample.hashnode.dev/a-pagination-cursor-is-not-a-forever-pass 2026-09-30T06:12:22.469Z daily 0.8 https://authbyexample.hashnode.dev/websocket-push-still-needs-authorization 2026-09-29T11:12:57.833Z daily 0.8 https://authbyexample.hashnode.dev/soft-delete-does-not-revoke-access 2026-09-29T09:04:18.109Z daily 0.8 https://authbyexample.hashnode.dev/authorization-needs-fresh-attributes-not-yesterday-s-snapshot 2026-09-29T06:16:24.274Z daily 0.8 https://authbyexample.hashnode.dev/your-ai-agent-shouldn-t-be-able-to-do-everything-you-can 2026-09-28T16:04:45.846Z daily 0.8 https://authbyexample.hashnode.dev/impersonation-tokens-still-need-target-user-authorization 2026-09-28T12:50:37.116Z daily 0.8 https://authbyexample.hashnode.dev/a-service-token-is-not-end-user-authorization 2026-09-28T09:12:07.843Z daily 0.8 https://authbyexample.hashnode.dev/feature-flag-is-not-authorization 2026-09-27T18:37:42.896Z daily 0.8 https://authbyexample.hashnode.dev/background-jobs-must-re-check-authorization 2026-09-27T14:06:52.435Z daily 0.8 https://authbyexample.hashnode.dev/cached-permission-is-not-forever 2026-09-27T09:22:47.234Z daily 0.8 https://authbyexample.hashnode.dev/graphql-resolver-must-authorize-every-field 2026-09-26T18:47:00.617Z daily 0.8 https://authbyexample.hashnode.dev/rate-limiting-is-not-authorization-2 2026-09-26T15:06:40.719Z daily 0.8 https://authbyexample.hashnode.dev/batch-request-must-authorize-every-item 2026-09-26T10:30:03.120Z daily 0.8 https://authbyexample.hashnode.dev/allowlisted-ip-is-not-authorization 2026-09-26T05:49:08.249Z daily 0.8 https://authbyexample.hashnode.dev/impersonation-still-needs-authorization 2026-09-25T15:07:41.920Z daily 0.8 https://authbyexample.hashnode.dev/rate-limiting-is-not-authorization 2026-09-25T10:30:24.912Z daily 0.8 https://authbyexample.hashnode.dev/audit-logging-is-not-authorization 2026-09-25T06:57:40.898Z daily 0.8 https://authbyexample.hashnode.dev/list-access-is-not-item-access 2026-09-24T17:09:48.529Z daily 0.8 https://authbyexample.hashnode.dev/oauth-on-mcp-is-not-the-same-as-authorizing-each-tool-call 2026-09-24T13:43:08.687Z daily 0.8 https://authbyexample.hashnode.dev/write-permission-is-not-delete-permission 2026-09-24T12:52:04.445Z daily 0.8 https://authbyexample.hashnode.dev/sso-success-is-not-resource-authorization 2026-09-24T08:11:06.018Z daily 0.8 https://authbyexample.hashnode.dev/logged-in-is-not-authorized 2026-09-23T17:05:53.418Z daily 0.8 https://authbyexample.hashnode.dev/batch-endpoints-still-need-per-item-authorization 2026-09-23T11:55:33.866Z daily 0.8 https://authbyexample.hashnode.dev/rate-limits-are-not-authorization 2026-09-23T07:29:22.360Z daily 0.8 https://authbyexample.hashnode.dev/feature-flags-are-not-authorization 2026-09-22T16:58:10.653Z daily 0.8 https://authbyexample.hashnode.dev/authorize-before-the-expensive-work-starts 2026-09-22T12:07:30.338Z daily 0.8 https://authbyexample.hashnode.dev/hmac-on-a-webhook-is-not-authorization-for-the-side-effects 2026-09-22T07:34:26.586Z daily 0.8 https://authbyexample.hashnode.dev/archive 2026-10-08T09:58:14.148Z daily 0.5 https://authbyexample.hashnode.dev/recommendations 2026-10-08T09:58:14.148Z weekly 0.4