5 posts · page 1 of 1
A practical guide to authentication in Next.js: NextAuth.js setup, middleware-based auth, server component auth checks, JWT vs session strategies, and protecting routes at every level.
Use Astro middleware to run code on every request: auth gates, locals injection, redirects, and response headers. Learn the onRequest signature, the next() flow, sequencing, and common production patterns.
Compare JSON Web Tokens with classic server-side sessions across storage, revocation, scaling, and security so you can choose the right model for your app.
A clear-eyed guide to JWTs: structure, signing, verification, refresh flows, and the real-world failure modes nobody warns you about.
OAuth2 demystified for working developers: the four flows, access and refresh tokens, PKCE, scopes, and where security actually breaks in practice.