June 26, 2026
an editor just for me: building the admin panel
Writing posts in a split-pane markdown editor with a live preview, moderating comments, and why the server checks permissions even though the UI already hid the button.
Posts tagged "devlog"
June 25, 2026
svelte, forms, and never letting the browser hold the token
Server-side rendering, form actions instead of client fetch calls, the proxy that keeps the access token out of the browser entirely, and sanitized markdown rendering.
June 23, 2026
posts, drafts, and a comment tree that took longer than the posts did
How the blog service models posts, slugs, drafts and scheduled publishing, a nested comment tree, likes and reports, on top of Postgres migrations.
June 22, 2026
the part of the blog you never see
How accounts, password hashing, tokens and cookies, refresh rotation, and rate limiting work under the hood of this blog's login page.