Logout From All Devices in Node.js on Password Change
Logout from all devices in Node.js: end every other session on password change and add a signed-in devices page. Build it in your app today.
-
-
Session-Based Authentication in Node.js: Fix 4 Defaults
Session-based authentication in Node.js ships with four risky express-session defaults. Fix the proxy cookie, fixation, and CSRF today.
-
How to Actually Use AI Agent Skills
Two skill repos are pulling attention right now. Matt Pocock’s skills and Lauren Tan’s pstack. The obvious move is to install both and hope your agent gets smarter. That move fails. AI agent skills are just markdown files, and markdown you have never read is noise. The video this post covers spends a week inside…
-
AI-assisted coding tips: 10 Claude Code lessons, fact-checked
A reference version of Aleksander Stensby’s NDC Copenhagen 2026 talk on AI-assisted coding, with the commands, config, and a fact check of every claim.
-
Claude Code daily workflow commands most people skip
Claude Code commands for daily work, checked against the docs: Ctrl+G plan editing, /rewind, /btw, /usage, /context, /goal, /focus, and claude agents.
-
Claude Code setup you do once and use forever
Claude Code setup you do once: a lean CLAUDE.md, local and user instruction files, deny rules for secrets, /doctor cleanup, themes, and a status line.
-
Extending Claude Code: hooks, skills, bundled commands, and headless mode
Extend Claude Code with hooks that feed test failures back, skills that bundle scripts, /batch, /simplify, /loop, project .mcp.json, and claude -p.
-
Node.js Forgot Password Without the Account Takeover
A Node.js forgot password route that trusts req.hostname emails users an attacker’s link. Fix the link, token, timing, and sessions. Secure yours today.
-
AWS Cognito Without Amplify in Next.js: Just OAuth
Run AWS Cognito without Amplify in Next.js. Write the OAuth flow by hand and fix the logout that signs users back in. Build it today.
-
Node.js Email Verification Without the User-List Leak
Most Node.js email verification tutorials tell attackers who your users are. Give every address the same answer in the same time. Fix your signup today.
