Latest Updates

Documenting code, one commit at a time.

Laravel PHP OAuth

Limiting OAuth Providers in Laravel

Working on the devlog-ist/landing project, we're refining the authentication flow. The goal is to streamline user registration and login, particularly for non-developers who might be contributing recommendations. We've adjusted the available OAuth providers to match user roles.

Previously, both GitHub and LinkedIn were presented as default options on the login and registration pages.

Read more
PHP Laravel OAuth

Enhancing User Security in Laravel OAuth Implementations

OAuth provides a streamlined approach to user authentication, but it's crucial to implement security measures that protect user data and prevent unauthorized access. A common scenario involves social login, where users authenticate via third-party providers like GitHub or LinkedIn.

The Problem: Unregistered Users and Automatic Registration

A potential vulnerability arises when users not yet

Read more
PHP Laravel Symfony

Enhancing Email Notifications with Transactional Headers and Code Style Improvements

Introduction

In our ongoing effort to improve the reliability and traceability of email communications within our application, we've recently implemented transactional email headers for recommendation notifications. This, coupled with some code style enhancements, aims to provide a more robust and maintainable system.

Transactional Email Headers

Transactional emails, such as

Read more

Enhancing Technology Detection in Post Generation

Improving the accuracy and scope of technology detection is crucial for generating relevant and informative content. A recent update introduces rule-based technology detection, significantly expanding our ability to identify the technologies involved in code changes. This enhancement allows for more precise tagging and categorization of blog posts, benefiting both content creators and readers.

Read more

Content Negotiation for AI Agents: Serving Markdown

Our application now supports content negotiation to better serve AI agents and LLMs. We've added the ability to return Markdown instead of HTML when requests include the Accept: text/markdown header.

This enhancement allows AI agents to directly consume the raw Markdown content of our posts, simplifying parsing and improving efficiency.

The Problem

Previously, our application served HTML

Read more

Enhancing GitHub OAuth Flow: Preserving User Permissions

Introduction

This article discusses a common issue in applications using GitHub OAuth for authentication: inadvertently overwriting a user's existing token with one that has fewer permissions. We'll explore how to ensure the application preserves the user's original, broader-scoped token when requesting narrower scopes during subsequent logins.

The Problem

Many applications use GitHub

Read more
PHP Queue JavaScript

Improved Retry Handling for AutoSyncGeneratePostJob

Introduction

The AutoSyncGeneratePostJob is crucial for automatically generating posts. Recently, we encountered an issue where rate limits were causing the job to exhaust its retry budget prematurely, leading to job failures even when the underlying issue was temporary.

The Challenge

The original job configuration used a $tries property to define the maximum number of attempts.

Read more