#auth
3 posts tagged auth. View all posts.
How to secure a vibe-coded app: the 3 bugs a blank repo always ships
A coding agent starting from an empty folder reproduces the same three security bugs every time — un-revocable sessions, payment webhooks that charge twice, and queries that return another tenant's rows. Why it happens, and how a tested base closes all three.
The last 20%: where vibe-coded SaaS apps break and leak
To make a vibe-coded app production-ready you have to survive the invisible 80% — auth that forgets, tenant data that leaks, billing that double-charges. Here's where it breaks, with real incidents, and what "done" actually requires.
From a Lovable/Bolt mockup to a real backend: what has to be true before you charge
The prototype-to-production gap, concretely. The invisible 80% a Lovable or Bolt mockup skips — idempotent billing, revocable sessions, tenant isolation, server-side secrets — and the exact code that closes it before you take money.