OAuth for CLIs and SPAs in 2026: PKCE, Loopback Redirects, and the RFC 9700 Checklist
If you shipped a CLI tool or a single-page app in the last few years, you have probably implemented “OAuth”
Tag: best practices
Structured Logging in Go: A Practical slog Field Guide
Every codebase has a logging moment of reckoning. It arrives when someone has to debug a production incident at 2
Continue readingStructured Logging in Go: A Practical slog Field Guide
Secrets Management Beyond .env Files: Vault, External Secrets, and CI Hygiene
Every codebase that touches a database, an S3 bucket, or a third-party API has secrets, and every team eventually learns
Continue readingSecrets Management Beyond .env Files: Vault, External Secrets, and CI Hygiene
Go vs Rust vs Free-Threaded Python: Memory Models Compared
Every concurrent program rests on a promise most developers have never read: the language’s memory model. It is the contract
Continue readingGo vs Rust vs Free-Threaded Python: Memory Models Compared
Zero-Downtime PostgreSQL Migrations: Locks, Rewrites, and Expand-and-Contract
Every schema migration is easy the first time, when the table is empty and the only user is your test
Continue readingZero-Downtime PostgreSQL Migrations: Locks, Rewrites, and Expand-and-Contract
The Go Garbage Collector in Production: GOGC, GOMEMLIMIT, and Allocation Discipline
Most Go services run for months without anyone touching a single GC knob, and that is exactly how the runtime
Continue readingThe Go Garbage Collector in Production: GOGC, GOMEMLIMIT, and Allocation Discipline
API Versioning in Go: URL Strategies, Breaking Changes, and Deprecation That Doesn’t Break People
One Tuesday your API’s most popular endpoint works fine. Two Tuesdays later, a mobile app that has been calling it
Structured Logging in Go With slog: Handlers, Sampling, and Dynamic Levels
A request fails at 2 AM. The on-call engineer greps through logs looking for a trace ID, finds seventeen lines
Continue readingStructured Logging in Go With slog: Handlers, Sampling, and Dynamic Levels
PgBouncer 1.26.0: Pre-Auth CVEs, the search_path Fix, and What Changes for Pool Sizing
PgBouncer has quietly become mandatory infrastructure for PostgreSQL at scale. If you run more than a few hundred client connections
API Pagination Strategies: Offset, Cursor, and Relay Connections Done Right
Sooner or later, every API designer hits the pagination wall. The endpoint works fine in staging, then production traffic arrives
Continue readingAPI Pagination Strategies: Offset, Cursor, and Relay Connections Done Right