Skip to the content
Asnim Ansari
.
Backend, Rust and trading systems
posts
books
bookmarks
travel
resume
github
Tag · 1
security.
Posts tagged security.
All tags
The middleware that authenticated nothing
A session middleware in our Axum API let anonymous callers through to any handler that forgot to ask who they were. Here's the bug, why the obvious fix isn't enough, and the three designs we measured before picking one.
Sep 15, 2026