Development & Technology23 articles
Architecture, implementation, authentication, and operations. Articles to inform critical decisions in development.
Articles are ordered by popularity over the past 30 days.
Supabase → Clerk → Better Auth — The 2026 Authentication Migration Playbook for Client Projects
Stop building custom login screens for internal tools: consolidate authentication into Google Workspace
Before Claude Code spreads unchecked across your organization — Consolidating enterprise rollout with SSO, budget caps, and controls
Written for readers a decade from now — Where to begin post-quantum cryptography migration
Unified Secret Management for Humans and AI Agents Using HashiCorp Vault 2.0 and Identity Federation — Custom Design Guidelines (2026)
Is the inherited authentication code secure? Pitfalls of JWT verification middleware
Before the CEO's Account Gets Taken Over — Two-Step Verification and Passkey Migration for SMEs
Former employees' accounts were disabled, yet non-human IDs used by systems remain active
AI Agent Approvals Provide No Safety Net: One in Three Overlooked
Having “Sign in with Google” Implemented for You — What to Look for During Acceptance Testing
Why does changing a login flow require three separate releases?
Moving beyond the binary choice of accepting or declining all app permission requests
Production environment permissions left in contractor accounts — How to switch to "granting access only when needed"
How many service account keys have you distributed? The choice of keyless integrations
Before Connecting Internal AI Agents to Business Systems: Essentials of Permission Management (MCP Authorization)
Too many SaaS apps pushing login management to its limit: Centralizing SSO with Google Workspace as IdP through custom development
Moving beyond login-only authorization: Continuous authorization design for sensitive custom systems
Designing authentication and authorization for AI agents — incorporating permissions and delegation into custom projects
Eliminating Manual SSH Execution on Production Servers — Building Auditable Job Execution Platforms in Custom Development
API Gateway Authorization Bypassed via Trailing Slash — API Authorization Security Audits for Client Systems 2026
The "stop storing JWTs in localStorage" debate: Security audits for web authentication implementations in client development
Protecting custom MCP servers with OAuth 2.1 — authentication design for custom MCP integrations (2026)
Showing 1–23 of 23 articles
Turning concepts into design.
Development Environment↔AI Models
Access Permissions · Data · Logs
Building an environment
to use AI internally
Internal data, development environments, and access permissions. Advancing adoption concepts into concrete technical reviews.
Compare approachesOrganize implementation requirementsTest on a small scale
Read feature 
Google Workspace
administration basics
Resolving administrator uncertainties from rollout to sharing and permissions.
Pricing & rolloutSharing rulesPermissions & security
Read feature 
Getting started with AI
at work
Selecting tasks to delegate, experimenting on a small scale, and operating safely.
How AI worksTesting in workflowsSafe usage
Read feature 
Improvement notebook for
growing your website
Forms, usability, and updates: tackling post-launch improvements one step at a time.
Form optimizationUI refinementsUpdates & operations
Read series