HNHacker News
TopNewBestAskShowJobs

aaronpina

6 karma · joined February 3, 2026

.NET developer specialising in secure authentication for APIs. Writing practical guides on JWT, OAuth flows, refresh tokens, revocation and related patterns. Building authority in .NET security one deep-dive at a time. aaronpina.com
submissionscomments
aaronpina··on SpaceX acquires xAI, plans to launch a satellite constellation to power it
It's great that Elon has such ambitious plans, but as he keeps saying, he wants the future to look like the Culture in Iain M Bank's sci-fi series of the same name. If you read at least the first book of the series, you'll see that it's a Communist society run by AI's. I'm not really sure that's the kind of future I want to be living in. Elon's original plan just to make life multi-planetary was a much more palatable future.
aaronpina··on [dead]
Refresh tokens are essential for secure, long-lived sessions in .NET APIs, but they are surprisingly easy to get wrong. This post walks through building a simple auth server that issues short-lived JWT access tokens + opaque refresh tokens, then shows a practical client token refresh strategy: reactive refresh (automatic on 401 with DelegatingHandler). Includes full runnable code, common pitfalls, and an engaging style that reads like a magazine article. Built from first principles in .NET 10.