Skip to main content

Phantom Token NGINX Module: Secure API Gateway Auth


by Danila Vershinin, February 10, 2026

Learn how to implement the Phantom Token pattern in NGINX to secure your APIs. This module exchanges opaque access tokens for JWTs at the gateway level, protecting sensitive claims from client applications while working with any RFC 7662-compliant OAuth provider.

Read More...

NGINX Rate Limiting: The Complete Guide


by Danila Vershinin, January 22, 2026

Learn how to configure NGINX rate limiting using the leaky bucket algorithm. This comprehensive guide covers limit_req_zone, burst, nodelay, delay parameters, whitelisting IPs, and production-ready configurations to protect your server from DDoS attacks, API abuse, and brute force attempts.

Read More...