Mehdi Akiki

Writing archive

Everything published under Writing, newest first. Each entry is labelled as part of an investigation, an article or reference. Short engineering notes have their own archive.

  • Published on

    Article · Interrupted execution

    Webhook Signatures Need Replay Protection Too

    Webhook verification middleware and tests that authenticate the exact request bytes, reject stale signed deliveries, support key rotation, and deduplicate effects durably.
  • Published on

    Article · Through the layers

    A Rust FFI Boundary Is More Than repr(C)

    A tested Rust-and-C FFI boundary covering ABI layout, pointer validation, ownership, panics, error reporting, callbacks, versioning, and cross-language harnesses.
  • Published on

    Article · Interrupted execution

    Preventing an OAuth Token Refresh Stampede

    A concurrent refresh design using local single-flight work, database versions, conditional writes, and recovery rules for providers that rotate refresh tokens.