Dev.toOctober 10, 2026 · 19 min read
theAuth: Add Login to an Existing Next.js App
Part 1 of 8typescriptwebdev
Writing
RSSEvery essay and deep dive I have published, aggregated here and from the Levelrail blog and Dev.to.
15 pieces
Dev.toOctober 10, 2026 · 18 min readtheAuth Guide: Cap Agent Spend and Require Human Approval
Part 2 of 8aisecurity
Dev.toOctober 10, 2026 · 18 min readtheAuth Passwordless Login: Passkeys, Magic Links, OTP
Part 3 of 8webdevsecurity
Dev.toOctober 10, 2026 · 17 min readtheAuth for AI Agents: Identity and Scoped Permissions
Part 5 of 8aiwebdev
Dev.toOctober 10, 2026 · 16 min readtheAuth Multi-Tenant SaaS Auth: Orgs, RBAC, SSO, SCIM
Part 6 of 8saassecurity- Dev.toOctober 10, 2026 · 21 min read
Secure an MCP Server for Production with theAuth
Part 7 of 8mcpai 
Dev.toOctober 10, 2026 · 19 min readtheAuth Audit Trails: Compliance Logging for AI Agent Actions
Part 8 of 8securityai
Dev.toOctober 10, 2026 · 6 min readAdd Google, GitHub or OIDC Sign-In to Your Self-Hosted Dashboard, and Keep It Safe
oauthsso
Dev.toMay 29, 2026 · 8 min readTanStack shipped a postmortem for the 42-package npm compromise. Here is what every project should change this week.
securityjavascript
Dev.toMay 3, 2026 · 4 min readGiving an AI agent permission to spawn sub-agents (without losing control)
aitypescript
Dev.toApril 28, 2026 · 6 min readAn AI Tool Had OAuth to Their Whole Google Workspace. Then Vercel Got Breached.
securitywebdev
Dev.toApril 15, 2026 · 4 min readI stopped memorizing openssl flags
rustcli
Dev.toApril 13, 2026 · 5 min readYour VS Code Extensions Are a Supply Chain Attack Surface
securityvscode
Dev.toMarch 30, 2026 · 6 min read5 open source auth libraries that actually handle AI agents (2026)
aisecurity
Dev.toFebruary 7, 2026 · 11 min readOpenClaw and Moltbook: $3,600/Month, WhatsApp Bans, and 923 Exposed Gateways. An Engineer's Breakdown.
aiopensource