3 min read
Sports PreGame: public defaults, auth oracles, and soft social takeovers
A second pass over public reads and auth — defaults that weren't access control, error messages that leaked too much, and social login that trusted the wrong signal.
Tag
2 posts
A second pass over public reads and auth — defaults that weren't access control, error messages that leaked too much, and social login that trusted the wrong signal.
What broke in production on a React Native + AWS youth soccer app — and the fixes that actually stuck.