2026-02-10

When the Celery Worker Broke My Auth Design, I Settled on API Keys

I discovered that Celery workers lack request.user and session data, rendering OAuth2, JWT, and session auth ineffective. By introducing API keys linked to users, I solved both authentication and identification, and gained operational benefits like easy key management, rotation, and user‑based billing.