Published onMarch 15, 2026HMAC Timestamp Tokens: Zero-Trust Communication Between Your Own ServicesSecurityHMACArchitectureNode.jsTypeScriptMicroservicesAuthenticationHow we secured inter-service communication with HMAC-SHA256 signed tokens that expire in 10 seconds — no session state, no API keys to rotate, no middleware databases to query.