Posts

12 of 12 posts on this page

You Don't Know JSON: Part 7 - Security: Authentication, Signatures, and Attacks

JSON has no built-in security. The ecosystem response: JWT for authentication, JWS for signing, JWE for encryption. Learn how these work, common attacks (algorithm confusion, injection, timing), and how to secure JSON-based systems.

Building a GCP Secret Manager Emulator for Offline Integration Testing

Needed offline GCP Secret Manager testing for CI/CD pipelines. Existing solutions were either too heavy or incomplete. Built a standalone gRPC emulator that works with the official Go SDK–zero credentials, zero network calls, 100% local.

The Complete Guide to API Communication Patterns: REST, GraphQL, WebSocket, gRPC, and More

Master API communication patterns: REST, GraphQL, WebSocket, gRPC, webhooks, message queues, and more. Complete guide with diagrams, code examples, and decision frameworks for choosing the right pattern.

Mastering ZSH: Part 1 - Hooks and Automation

Complete guide to ZSH hooks: automate prompts, time commands, activate virtualenvs on cd, and filter secrets from history–without slowing down your terminal.

Mastering ZSH: Part 2 - Line Editor and Custom Widgets

ZLE lets you create custom keybindings that manipulate your command line. Learn the fundamentals, build practical widgets (insert git branch, fuzzy file search), and understand how fzf integrates with ZSH.

HTTP Error Handling in Go: Chi, Gin, and Echo

Stop returning errors as plain text. Learn how to implement consistent, structured HTTP error responses in Go with support for Chi router, Gin framework, and Echo framework. Includes field-level validation and trace IDs.