#ai#secret#security#llm
Want AI Agents That Don't Spill Secrets? Don't Give Them Secrets
Some time ago, I reviewed an AI agent implementation and found an API key in the system prompt. The...
Andrea Chiarelli8 min read
Author profile
Andrea Chiarelli
Software Engineer and Technical Author, i.e., Continuous Learner Current interests: #programming, #dotnet #javascript, #web, #developerexperience #identity #iam
Articles by @andychiare
Browse the latest writing surfaced through DevArt.
Andrea Chiarelli8 min read
#csharp#dotnet#authentication#security
Implementing the Device Authorization Flow with Auth0 in a C# Console App
The redirect-based OAuth 2.0 flows assume one thing: the user has a browser on the same device where...
Andrea Chiarelli7 min read
#oauth#security#identity#microservices
The Many Faces of OAuth 2.0 Token Exchange
Most developers face the need for token exchange when their architecture outgrows its initial...
Andrea Chiarelli11 min read
#ai#mcp#llm
What AI Tools, MCP Servers, and Skills Actually Do
I remember being very confused when I first heard about an LLM's ability to request code execution....
Andrea Chiarelli9 min read
#ai#security#architecture#llm
AI Agents Have Two Souls. You Only Control One
Everyone seems to be building AI agents now. But ask ten developers what an AI agent actually is, and...
Andrea Chiarelli10 min read
#oauth#bff#security#designpatterns
Things Developers Get Wrong About the Backend for Frontend Pattern
Since I published my overview of the Backend for Frontend (BFF) pattern, the questions I've received...
Andrea Chiarelli5 min read
#ai#llm
Generative AI and Non-Determinism
“The limits of my language are the limits of my world.” – Ludwig Wittgenstein We often hear that...
Andrea Chiarelli4 min read
#fapi#oauth#identity#security
Common FAPI Misconceptions
For some time now, I've been interested in FAPI from both an Identity practitioner's and a...
Andrea Chiarelli4 min read
#mcp#ai#security#tutorial
Secure a C# MCP Server with Auth0
As the Model Context Protocol (MCP) gains traction, the transition from "localhost" experimentation...
Andrea Chiarelli17 min read
#oauth#security#identity#fapi
Strengthening OAuth 2.0 with FAPI 2.0
OAuth 2.0 has long been the cornerstone of modern authorization. It is a consolidated technology that...
Andrea Chiarelli4 min read
#devrel#career#role#developers
What a Developer Advocate Is Not
Someone: "What’s your job?" Me: "I'm a developer advocate." Someone: "Oh, cool! Like... what do you...
Andrea Chiarelli4 min read
#ai#vibecoding#developer#programming
Being a Developer in the Vibe Coding Era
I was looking at results of the Stackoverflow Developer Survey 2025, and one aspect caught my...
Andrea Chiarelli4 min read
#dotnet#maui#openid#authentication
.NET MAUI Authentication on Windows: The OpenID Connect Challenge
I'm not an expert desktop and mobile developer. My experience in this field is from a while ago,...
Andrea Chiarelli4 min read
#blazor#dotnet#programming
Letter to Blazor
Dear Blazor, I met you when you were still in your infancy. I started playing with you when you could...
Andrea Chiarelli5 min read
#blazor#authentication#oauth#dotnet
Securing Blazor in All Its Flavors
Since its first official release in .NET 3.0, Blazor has made a solemn promise to .NET developers:...
Andrea Chiarelli9 min read
#dotnet#authentication#security#oauth
Pushed Authorization Requests in .NET 9: Why and How to Use Them
You may have heard that .NET 9.0 brings Pushed Authorization Requests (PAR) support in ASP.NET Core....
Andrea Chiarelli8 min read
#cookies#jwt#token#session
Sessions, Tokens, and Rock'n'Roll
Does dealing with tokens eliminate the need for cookie-based sessions? You will find plenty of...
Andrea Chiarelli12 min read
#auth0#dotnet#template#authentication
Auth0 Templates for .NET
If you are a .NET developer and have been using Auth0 by Okta's authentication and authorization...
Andrea Chiarelli4 min read
#webdev#programming#javascript#webcomponents
World Wide Web Wars
When I was a kid, my grandfather used to tell me about his wartime adventures. He served in both...
Andrea Chiarelli11 min read
#functional#programming#declarativeprogramming#javascript
A Decalogue for the Extreme Functional Developer
Ten rules that guides you to become an extreme functional developer
Andrea Chiarelli5 min read
#javascript#languages#oop
In defense of JavaScript oddities
A defensive argument on the alleged oddities of JavaScript, one of the most common and misunderstood programming languages
Andrea Chiarelli3 min read
#javascript#oop#class#inheritance
A matter of class: examining the class construct in JavaScript
The class construct is very handy, but it may lead to serious misconceptions about the Object-Oriented nature of JavaScript.
Andrea Chiarelli4 min readAdvertisement