Granting OAuth2 AuthZ in Entra

15 Jan 2026 🔖 intermediate web development 💬 EN

I recently had to troubleshoot an Entra issue that led me down a rabbit-hole crash course in OAuth / Microsoft Entra App Registrations (and their corresponding Entra Service Principals, a.k.a. Entra Enterprise Applications).

Validate networking lines of sight

08 Jan 2026 🔖 architecture devops integration security 💬 EN

So, you think set up your firewall correctly? Want to double-check? Below I wrote 2 little PowerShell/Pester scripts to help validate actual lines of sight, once you know what you intended to implement.

Parameterization best practices with Azure Data Factory

15 Dec 2025 🔖 devops integration git azure 💬 EN

If you want to make a “single” Azure Data Factory (“ADF”) git repository that can be seamlessly deployed into both nonproduction and production environments, you’ll have to carefully optimize its parameters and variables, moving hardcoded values as far to the “outside of the onion” as you can.

• (Note: Almost all of this article more or less also applies to Azure Synapse Analytics workspaces – the main concept that doens’t transfer is that Synapse doesn’t have an equivalent to Global Variables, at least not as of late 2025.)

OIDC issuers: passwordless isn't trustless

12 Dec 2025 🔖 devops integration 💬 EN

Right now, I’m a little stuck deliberating how much I trust the OpenID Connect (“OIDC”) secretless authentication (“authN”) protocol when the OIDC “issuer” isn’t, at the scale of, say, a hyperscaler cloud service provider.

Make automated software test results visible

11 Dec 2025 🔖 web development tips 💬 EN

I’m a big fan of developers proving to QA exactly what happened during automated test execution, by publishing the results into something associated with the Kanban board / work tracking system that the whole team is already using.

Browser-based test automation: collaboration tips

11 Dec 2025 🔖 web development tips 💬 EN

Hot take: developers, not QAs, should implement browser-based end-to-end test automations. Hello Playwright / Cypress / Selenium / Puppeteer / etc. Goodbye BrowserStack Low-Code Automation / etc.

Microsoft-hosted public CI/CD runtimes

24 Nov 2025 🔖 devops 💬 EN

I drafted an architectural building block and network diagram to better communicate how publicly-networked Microsoft-hosted CI/CD runtimes work.

Adding Vitest and Playwright tests to Astro

22 Nov 2025 🔖 web development minimum viable build intermediate 💬 EN

I’ve been kicking out demo codebases faster than I can keep up with blogging them. Here are a few Astro-related codebases to share from my GitHub:

Vendor support shapes how we learn IaC

19 Nov 2025 🔖 devops 💬 EN

Hot take / shower thought:  for any given IT resource configurator/administrator, the ease of grasping the point of idempotently declarative approaches to managing the current state of the resource’s configuration is largely dependent upon their good/bad luck with vendor support.  Vendors set the tone for learning journeys.

Licensing E2E Testing Frameworks

18 Nov 2025 🔖 web development 💬 EN

If you’re in an enterprise setting, you might need to ask for permission, not forgiveness, when it comes to importing third-party programming language libraries and software development kits (SDKs) into your codebases.