tail -f blog.log
Longer write-ups on the exact problems the tools solve — expired tokens, cron's sneaky OR rule, which hash to trust, whose fault a 502 really is. Written by a developer, for developers. No fluff, no popups, no "10 tricks" listicles.
authfeatured_post
Anyone can paste a token into a decoder. The skill is knowing what to look for
once it's open — which claims bite you in production, what alg: none
should trigger, and when the token is fine and your server's clock is wrong.
ls -t posts/
The %20 vs + space confusion, the %2520 double-encoding bug, and which encode function to actually use.
Read postWhat a .env file actually is, why git history makes leaked secrets permanent, and what to do if you've already committed a key.
Read postThe root-to-authoritative journey, what TTL really controls, why "propagation" is a myth, and how to debug it with dig.
Read postTwo swapped characters and some missing padding — the whole difference, and why atob() chokes on your JWT.
Read postThe types you'll actually use, scope discipline, the 50-character rule, and copy-paste examples for your next PR.
Read postMAJOR breaks, MINOR adds, PATCH fixes. The 0.x phase, what ^ and ~ bet on, and how Conventional Commits automate it.
Read postThe auth twins, the gateway trio, and a who-to-blame table for the status codes that start incidents.
Read post