Articles
I’ve written several technical articles since 1997 for various blogs, websites, and magazines, both in English and in Italian. Here you can find a list of the most recent ones:
Everybody Wants to Be a Dev!
Does AI really make it possible for anyone to create apps? Can anyone really become a developer?
2026-07-19 
The Art of Consent Management in the OAuth World
How to implement proper consent management to allow users to consciously authorize your applications.
2026-07-16
Want AI Agents That Don't Spill Secrets? Don't Give Them Secrets
Learn why putting secrets in tool schemas, system prompts, or skill prompts exposes them to the LLM and how to keep credentials in the deterministic layer instead.
2026-06-26
Implementing the Device Authorization Flow in a C# Console App
Learn how to implement the OAuth 2.0 Device Authorization flow to authorize a .NET console application built with C#.
2026-06-12
The Many Faces of OAuth 2.0 Token Exchange
Explore OAuth 2.0 Token Exchange patterns: impersonation, delegation, protocol transition, and cross-app access for modern architectures.
2026-06-03
What AI Tools, MCP Servers, and Skills Actually Do
Learn the critical differences between AI tools, MCP servers, and skills to build more capable, secure, and standardized AI agents.
2026-05-19
AI Agents Have Two Souls. You Only Control One.
Why the code around your LLM matters more than the LLM itself: the architectural insight that changed how I think about AI agent security.
2026-05-08
Backend For Frontend Authentication Pattern with Auth0 and ASP.NET Core
The Backend For Frontend (BFF) authentication pattern is a powerful architectural pattern that allows to improve the security of Single-Page Applications (SPAs) using OAuth and OpenID Connect.
2026-04-29
Things Developers Get Wrong About the Backend for Frontend Pattern
Let’s address the most common pitfalls and misconceptions developers encounter when implementing the Backend for Frontend (BFF) pattern.
2026-04-24