Skip to content

Alex Rusin Blog

  • BlogExpand
    • AWS
    • Javascript Development
    • Remix
    • PHP MySQL Development
    • Laravel
    • System Administration
    • WordPress Development
    • Magento
    • Uncategorized
  • My Projects
Alex Rusin Blog
  • Claude Code daily commands: /rewind, /btw, /goal, and /focus next to a terminal window
    AI-Augmented Development

    Claude Code daily workflow commands most people skip

    Byalexrusin November 1, 2026November 1, 2026

    Claude Code commands for daily work, checked against the docs: Ctrl+G plan editing, /rewind, /btw, /usage, /context, /goal, /focus, and claude agents.

    Read More Claude Code daily workflow commands most people skipContinue

  • Claude Code setup: a terminal window showing CLAUDE.md, settings.json deny rules, and a status line
    AI-Augmented Development

    Claude Code setup you do once and use forever

    Byalexrusin November 1, 2026November 1, 2026

    Claude Code setup you do once: a lean CLAUDE.md, local and user instruction files, deny rules for secrets, /doctor cleanup, themes, and a status line.

    Read More Claude Code setup you do once and use foreverContinue

  • Extend Claude Code: a terminal connected to hooks, skills, plugin, and headless mode modules
    AI-Augmented Development

    Extending Claude Code: hooks, skills, bundled commands, and headless mode

    Byalexrusin November 1, 2026November 1, 2026

    Extend Claude Code with hooks that feed test failures back, skills that bundle scripts, /batch, /simplify, /loop, project .mcp.json, and claude -p.

    Read More Extending Claude Code: hooks, skills, bundled commands, and headless modeContinue

  • Password reset email whose link points to hacker.com, with the caption 1 header
    Javascript Development

    Node.js Forgot Password Without the Account Takeover

    Byalexrusin October 25, 2026October 25, 2026

    A Node.js forgot password route that trusts req.hostname emails users an attacker’s link. Fix the link, token, timing, and sessions. Secure yours today.

    Read More Node.js Forgot Password Without the Account TakeoverContinue

  • A Sign out button with an arrow looping back to the dashboard, next to the title AWS Cognito Without Amplify, Next.js, Just OAuth
    Javascript Development

    AWS Cognito Without Amplify in Next.js: Just OAuth

    Byalexrusin October 19, 2026October 19, 2026

    Run AWS Cognito without Amplify in Next.js. Write the OAuth flow by hand and fix the logout that signs users back in. Build it today.

    Read More AWS Cognito Without Amplify in Next.js: Just OAuthContinue

  • Signup form showing an "Email already in use" error next to the title Node.js Email Verification, without the user-list leak
    Javascript Development

    Node.js Email Verification Without the User-List Leak

    Byalexrusin October 11, 2026October 11, 2026

    Most Node.js email verification tutorials tell attackers who your users are. Give every address the same answer in the same time. Fix your signup today.

    Read More Node.js Email Verification Without the User-List LeakContinue

  • 6 auth security checks you can run in 20 minutes, with a padlock, curl window, and cookie icon
    Javascript Development

    6 Auth Security Checks to Run on Your App in 20 Minutes

    Byalexrusin October 6, 2026October 6, 2026

    Six auth security checks that catch token, cookie, logout, and rate limit bugs in about 20 minutes. Run them on your app today.

    Read More 6 Auth Security Checks to Run on Your App in 20 MinutesContinue

  • Simple software architecture lessons for new developers
    Javascript Development

    Simple Software Architecture Lessons for New Developers

    Byalexrusin October 3, 2026October 3, 2026

    Simple software architecture starts with saying no. Jerry Nixon’s NDC talk explains what every box does. Learn which ones to skip.

    Read More Simple Software Architecture Lessons for New DevelopersContinue

  • Role on what? Fix RBAC in Express and Prisma, with a padlock shield over a project folder and three user roles
    Javascript Development

    Role-Based Access Control in Express and Prisma

    Byalexrusin October 3, 2026October 3, 2026

    Most Node tutorials store the role on the user. Fix role-based access control with project memberships, and make missing checks fail the build.

    Read More Role-Based Access Control in Express and PrismaContinue

  • Refresh Token Rotation
    Javascript Development

    JWT Logout Does Nothing: Refresh Token Rotation Fixes It

    Byalexrusin September 28, 2026September 28, 2026

    Most JWT logouts revoke nothing. Learn refresh token rotation, reuse detection, and the race condition that logs users out. Fix your logout today.

    Read More JWT Logout Does Nothing: Refresh Token Rotation Fixes ItContinue

Page navigation

1 2 3 … 20 Next PageNext

© 2026 Alex Rusin Blog - WordPress Theme by Kadence WP

  • Blog
    • AWS
    • Javascript Development
    • Remix
    • PHP MySQL Development
    • Laravel
    • System Administration
    • WordPress Development
    • Magento
    • Uncategorized
  • My Projects