Skip to content

DEV Community

allowfy

The Allowfy team. Writing about Poppy, customer sign-in, and the boundary between reading data and changing it. AI-assisted articles are disclosed.

Joined on Oct 24, 2026 https://allowfy.com

allowfy

Nov 1

Three different things people mean by verifying an audit log

#cryptography #testing

3 min read

allowfy

Oct 29

A DPoP proof must use the key the token was issued for

#security #oauth #api #testing

3 min read

allowfy

Oct 28

Succeeded in test mode does not mean the order changed

#testing #qa

3 min read

allowfy

Oct 27

A repeated confirmation is not an exactly-once guarantee

#webdev #testing #security #api

3 min read

allowfy

Oct 26

Customer approval and business review are different state transitions

#security #webdev #testing #api

2 min read

allowfy

Oct 25

Approval belongs to a revision, not just an operation ID

#security #webdev #testing #api

2 min read

allowfy

Oct 24

A valid agent token isn't permission to cancel every order

#security #python #ai #api

4 min read

loading...