Blog

Notes on web development, architecture, and the technical decisions behind the products we build.

All2 Architecture2 Security2 Engineering1 Payments1

July 8, 20263 min read

How to revoke a JWT instantly without storing sessions

The classic JWT problem is that you can't revoke a token until it expires. Token versioning solves it with one integer — no Redis, no session table.

Security

July 1, 20263 min read

From EmailJS to server-side sending: why keys don't belong in the browser

EmailJS is convenient until you see your credentials sitting in the bundle. The migration to an API route, double opt-in, and what it does for deliverability.

Security

Get new articles by email

One email when we publish something new. No spam, no promotions, unsubscribe in one click.