Job titles with the word "data" in them are known to be an enigmatic black box. This post explains how the pieces of the data pipeline fit together and how different teams interact with them.
One of the most unique and often misunderstood features of Ruby is blocks. Blocks are Ruby’s version of closures and can be used to make code more reusable and less verbose. But keywords such as yield can
Introduction As the engineering lead on the Flexible Pay team, I often get asked by my colleagues, “What is it like to work in a startup within a startup?” First, some context: Two years ago, Gusto decided to
Or, that time a single column update crashed our app unsplash-logoFredy Jacob A while back, a single class of jobs took down all of our async processes due to Out Of Memory problems. I told you how we
Understanding how to build Single Sign On (SSO) using the OAuth 2.0 framework with OpenID Connect may seem like a daunting task. This practical guide will show you how to build a secure SSO system.
Introduction During my time at Gusto as a part of the Application Security team, I’ve been exploring ways to improve defense against Cross-Site Scripting (XSS) in modern web applications. At Gusto, we primarily use Ruby on Rails
Imagine you have a Rails monolith and want to add new functionality. Your options are to 1) continue adding to the monolith, or 2) create a new service. Which do you choose? What if there’s a third
How we introduced granular authorization into our application and API. Illustration by Camellia Neri Last year, my team extended Gusto’s authorization system to give admins granular access to their companies’ accounts. In software security terms, authorization is
