Dev.toOctober 10, 2026 · 18 min read
theAuth Passwordless Login: Passkeys, Magic Links, OTP
Part 3 of 8webdevsecurity
Writing
RSSEvery essay and deep dive I have published, aggregated here and from the Levelrail blog and Dev.to.
8 pieces
Dev.toOctober 10, 2026 · 21 min readMigrate from Auth0 or Clerk to theAuth, Step by Step
Part 4 of 8authenticationmigration
Dev.toApril 18, 2026 · 7 min readI replaced Auth0 with an open source library in 30 minutes. Here is what broke.
authenticationopensource
Dev.toApril 18, 2026 · 5 min readI've built auth six times. Here's the system I would build today
Part 1 of 5authenticationwebdev
Dev.toApril 18, 2026 · 10 min readThe 8 tables behind a real auth system (Postgres schema, explained column by column)
Part 2 of 5postgresauthentication
Dev.toApril 18, 2026 · 9 min readHow to build a register user flow in Next.js 15 (frontend, backend, database, email)
Part 3 of 5nextjsauthentication
Dev.toApril 18, 2026 · 10 min readHow to build a login flow in Next.js 15 (sessions, cookies, CSRF, and the timing attack nobody talks about)
Part 4 of 5nextjsauthentication
Dev.toApril 18, 2026 · 7 min readHow to build a secure password reset flow in Next.js (the short version)
Part 5 of 5nextjsauthentication