Latest Updates

Documenting code, one commit at a time.

Laravel PHP OAuth

Limiting OAuth Providers in Laravel

Working on the devlog-ist/landing project, we're refining the authentication flow. The goal is to streamline user registration and login, particularly for non-developers who might be contributing recommendations. We've adjusted the available OAuth providers to match user roles.

Previously, both GitHub and LinkedIn were presented as default options on the login and registration pages.

Read more
PHP REST API

Optimizing AI-Generated Content for LinkedIn

When generating content for LinkedIn using AI, it's crucial to tailor the prompts for conciseness and engagement. The goal is to create posts that fully encapsulate the idea within LinkedIn's character limit, avoiding truncation and maximizing impact.

Key optimizations include instructing the AI to generate short, focused content (around 2500 characters), structured in 3-5 paragraphs.

Read more
Laravel REST API

Robust API Testing for the Landing Project

Working on the landing project, which is focused on creating a compelling user experience, we've recently enhanced our testing strategy to ensure the reliability of our GitHub API integrations.

The goal was to catch potential issues arising from changes to the GitHub API, preventing silent failures in our application. We've implemented a suite of integration tests that validate the structure of

Read more
PHP Laravel OAuth

Enhancing User Security in Laravel OAuth Implementations

OAuth provides a streamlined approach to user authentication, but it's crucial to implement security measures that protect user data and prevent unauthorized access. A common scenario involves social login, where users authenticate via third-party providers like GitHub or LinkedIn.

The Problem: Unregistered Users and Automatic Registration

A potential vulnerability arises when users not yet

Read more

Enhancing GitHub OAuth Flow: Preserving User Permissions

Introduction

This article discusses a common issue in applications using GitHub OAuth for authentication: inadvertently overwriting a user's existing token with one that has fewer permissions. We'll explore how to ensure the application preserves the user's original, broader-scoped token when requesting narrower scopes during subsequent logins.

The Problem

Many applications use GitHub

Read more
PHP Java MySQL

Tenant-Centric Quota Management with Manual Overrides

Managing resource quotas across multiple tenants can be challenging, especially when the need for manual overrides arises. This post explores how we refactored our token usage service to implement a tenant-centric quota system with support for manual adjustments.

The Challenge

Previously, our token quota management was user-based. This created inefficiencies when the context already provided

Read more

Enhancing Application Stability with Strategic Cache Invalidation

Introduction

Maintaining data consistency across distributed systems and applications often requires careful management of caches. Stale data in caches can lead to unexpected behavior and inconsistencies. We recently implemented several enhancements to our application's caching strategy, focusing on proactive invalidation to ensure data accuracy and prevent outdated information from impacting

Read more

Improving AI Usage Tracking with Refactored Queries

Optimizing AI Token Usage Queries

We've recently refactored and optimized our AI token usage tracking to improve performance and maintainability. This involved extracting duplicated queries and enhancing user filtering.

The Changes

The primary focus was on improving the efficiency of retrieving daily and monthly tenant AI usage data. This was achieved through two key changes:

Read more