28 articles with this tag

How we expanded our web application firewall from 15 basic signatures to 34 detection rules across 9 OWASP categories, with multi-layer URL decoding, anomaly scoring, IP reputation tracking, and honeypot traps that instantly ban scanners.

A comprehensive quality audit of our 275K-line codebase: generating loading skeletons for every page, adding error boundaries across route groups, migrating 3,796 hardcoded colors to CSS variables, and replacing console.log with structured logging.

How we built a 4-tier WebP thumbnail pipeline that generates responsive variants on upload, cutting blog image bandwidth by 93-99% — from 550KB originals to 5KB admin thumbnails.

Why we added rate limiting to all 23 authentication API routes, the 5-tier system we designed, and how an in-memory sliding window approach protects against brute force without adding infrastructure overhead.

Our journey migrating from a custom auth solution to Lucia Auth v3, including OAuth integration challenges.

How we migrated our WebAuthn Relying Party ID from control.boottify.com to the apex domain boottify.com, enabling biometric credentials to work across all subdomains with a dual RP ID verification strategy.

How we designed a storage abstraction that supports both local filesystem and S3 — with environment-driven switching, URL derivation, and zero application code changes when migrating between providers.

A deep dive into our image optimization pipeline — using Sharp to resize, compress, strip EXIF data, and convert uploads to WebP with profile-specific presets for blog, avatar, and logo images.

How we implemented a 5-tier sliding window rate limiter across all 23 authentication endpoints, with IP-based tracking, standard response headers, and a custom ApiError.tooManyRequests() factory.

How we identified and eliminated all 7 files over 500 lines, created shared hooks and components, and brought our entire codebase under control without breaking anything in production.

Why accessibility isn't optional for SaaS platforms, how we implemented SkipLink navigation, ARIA landmarks across all 3 layouts, and the keyboard navigation improvements that make Boottify usable for everyone.

How we set up Playwright for a complex Next.js 16 SaaS platform, why we inject database sessions instead of logging in through forms, and how 40 tests across 5 spec files give us confidence to ship fast.