AuthonAuthon Blog
All articles

Tutorials

Step-by-step guides for building authentication flows.

SKIP: Not a developer-focused topic
tutorial

SKIP: Not a developer-focused topic

SKIP: Not a developer-focused topic

skipskipskip
TokenSpeed and the Quiet Race to Make LLM Inference Boring
tutorial

TokenSpeed and the Quiet Race to Make LLM Inference Boring

A grounded look at TokenSpeed, the new LLM inference engine trending on GitHub, plus a practical benchmark you can actually run yourself.

llmmachinelearningperformance
AI Coding Has Its Own Language Now — Here's How to Decode It
tutorial

AI Coding Has Its Own Language Now — Here's How to Decode It

Matt Pocock's dictionary-of-ai-coding repo demystifies AI jargon. Here's why shared vocabulary matters and which terms you should actually learn.

aiprogrammingdeveloper-tools
Chromex: Building an AI Side-Panel Assistant Into Your Browser
tutorial

Chromex: Building an AI Side-Panel Assistant Into Your Browser

Explore Chromex, a Codex-powered Chrome side-panel AI assistant, and learn how browser-native AI tools leverage page context for smarter workflows.

chrome-extensionsaiopenai
Stash Gives Your AI Agents a Memory That Actually Persists
tutorial

Stash Gives Your AI Agents a Memory That Actually Persists

Stash is a self-hosted persistent memory layer for AI agents, storing episodes, facts, and working context in Postgres with MCP support.

aipostgresmcp
Harmonist: Zero-Dependency AI Agent Orchestration Worth Watching
tutorial

Harmonist: Zero-Dependency AI Agent Orchestration Worth Watching

A look at Harmonist, a zero-dependency AI agent orchestration framework with mechanical protocol enforcement trending on GitHub.

aipythonopensource
Exploring MasterHttpRelayVPN-RUST: DPI Bypass Built in Rust
tutorial

Exploring MasterHttpRelayVPN-RUST: DPI Bypass Built in Rust

A look at MasterHttpRelayVPN-RUST, a Rust-based DPI bypass tool using Google Apps Script relays and TLS SNI concealment. Architecture breakdown and practical notes.

rustnetworkingprivacy
The EU Is Forcing User-Replaceable Phone Batteries. There's a Loophole Apple Is Already Using.
tutorial

The EU Is Forcing User-Replaceable Phone Batteries. There's a Loophole Apple Is Already Using.

The EU mandates user-replaceable phone batteries by Feb 2027, but an 80% capacity exemption lets Apple sidestep the rule entirely.

right-to-repaireu-regulationmobile-hardware
HTML PPT Skill: AI-Powered Presentations Without PowerPoint
tutorial

HTML PPT Skill: AI-Powered Presentations Without PowerPoint

HTML PPT Skill lets AI agents generate professional slide decks as pure HTML with 24 themes and 31 layouts. Here's how it works and where it fits.

aiwebdevproductivity
Google Dropped TurboQuant Two Weeks Ago. The Community Already Made It Usable.
tutorial

Google Dropped TurboQuant Two Weeks Ago. The Community Already Made It Usable.

Two weeks after Google published their TurboQuant paper at ICLR 2026, five independent implementations exist -- including one running a 104B model on a MacBook.

turboquantlocallminference
Cisco Just Built Zero Trust for AI Agents. Here's Why That Matters.
tutorial

Cisco Just Built Zero Trust for AI Agents. Here's Why That Matters.

Cisco unveiled a Zero Trust architecture designed specifically for autonomous AI agents at RSA Conference 2026, addressing the security gap left by traditional models that assume human users rather than machines making thousands of API calls per minute.

securityai-agentszero-trust
MCP Hit 97 Million Installs. The Protocol War Is Over.
tutorial

MCP Hit 97 Million Installs. The Protocol War Is Over.

The Model Context Protocol crossed 97 million monthly SDK downloads in March 2026, cementing itself as the universal standard for connecting AI agents to tools, with backing from every major AI provider through the Linux Foundation.

mcpai-agentsinfrastructure
Building a Browser Game Where You Fly Through a Forest (It's Easier Than You Think)
tutorial

Building a Browser Game Where You Fly Through a Forest (It's Easier Than You Think)

A Reddit GIF of a bird flying through a forest went viral. Here's how to build a browser game like it using Canvas API and vanilla JavaScript.

gamedevjavascriptwebdev
Hackers Can Now Root Your Machine Through Your GPU. No, Really.
tutorial

Hackers Can Now Root Your Machine Through Your GPU. No, Really.

Two independent research teams disclosed GDDRHammer and GeForge attacks that exploit Rowhammer-style bit flips in GDDR6 GPU memory to break page table isolation and gain full root access to the host machine.

securitygpuhardware
Gemma 4 Runs on a Raspberry Pi. I Tested It.
tutorial

Gemma 4 Runs on a Raspberry Pi. I Tested It.

Hands-on guide to running Google's Gemma 4 E2B and E4B edge models on a Raspberry Pi and in the browser via WebGPU -- with real latency numbers, 128K context benchmarks, and honest comparisons to Phi-3-mini and other edge models.

gemma4edge-airaspberry-pi
Qwen 3.6-Plus Claims It's 3x Faster Than Claude Opus. I Looked at the Numbers.
tutorial

Qwen 3.6-Plus Claims It's 3x Faster Than Claude Opus. I Looked at the Numbers.

Alibaba released Qwen3.6-Plus on April 2, 2026 with a 1 million token context window and community reports of 3x speed over Claude Opus 4.6. A breakdown of what those claims actually mean, where the model excels, and whether Western developers should pay attention.

qwenalibaballm-benchmarks
Ollama Just Got 93% Faster on Mac. Here's How to Enable It.
tutorial

Ollama Just Got 93% Faster on Mac. Here's How to Enable It.

Ollama 0.19 ships with an MLX backend preview that nearly doubles decode speed on Apple Silicon. Step-by-step guide to enabling it, benchmarking before and after, hardware requirements, and an honest look at what works and what doesn't yet.

ollamamlxapple-silicon
Rust Rewrites Are Coming for Your Dev Tools (And That's a Good Thing)
tutorial

Rust Rewrites Are Coming for Your Dev Tools (And That's a Good Thing)

Rust rewrites are transforming developer CLI tools. A look at the claw-code-parity project and why systems-level thinking matters for AI coding assistants.

rustopensourcecli
LinkedIn Is Scanning Your Browser Extensions. Yes, All of Them.
tutorial

LinkedIn Is Scanning Your Browser Extensions. Yes, All of Them.

LinkedIn runs hidden JavaScript that probes thousands of Chrome extensions, encrypts the results, and sends them to third-party servers -- all without user consent or any mention in their privacy policy.

privacylinkedinbrowser-security
Japan Is Building a 1.4nm AI Chip. No, That's Not a Typo.
tutorial

Japan Is Building a 1.4nm AI Chip. No, That's Not a Typo.

Fujitsu and Rapidus are developing a 1.4nm AI inference chip at a new Hokkaido fab, backed by $1.7 billion in funding and a plan to skip entire semiconductor generations.

semiconductorsaijapan
Apple's April SDK Deadline Is Here. Your App Might Get Rejected.
tutorial

Apple's April SDK Deadline Is Here. Your App Might Get Rejected.

Starting April 2026, Apple requires all App Store submissions to use iOS 26 SDK or later, and the update scramble catches more teams off guard than you'd expect.

iosapplexcode
Anthropic Accidentally Leaked Their Next Model. It's Called Mythos.
tutorial

Anthropic Accidentally Leaked Their Next Model. It's Called Mythos.

Anthropic's CMS misconfiguration exposed Claude Mythos, a new Capybara-tier model with major advances in reasoning, coding, and cybersecurity, raising questions about what comes after Opus.

aianthropicclaude
React 20 Is Coming. Here's What Actually Matters (and What Doesn't).
tutorial

React 20 Is Coming. Here's What Actually Matters (and What Doesn't).

React 20 is in development. Heres whats actually worth caring about and what you can safely ignore.

reactjavascriptfrontend
We Moved Our API from Node to Bun. Here's What Broke (and What Got 3x Faster).
tutorial

We Moved Our API from Node to Bun. Here's What Broke (and What Got 3x Faster).

We moved our production API from Node.js to Bun. Some things broke, some got 3x faster. Heres the honest breakdown.

bunnodejsjavascript
I Gave Devin 10 Real Tasks. It Completed 3.
tutorial

I Gave Devin 10 Real Tasks. It Completed 3.

Devin costs $20/month now. I gave it 10 real engineering tasks. It completed 3. Heres what worked, what failed, and whether its worth it.

ai-codingdevindeveloper-tools
axios Got Hacked. If You Ran npm install Yesterday, Read This Now.
tutorial

axios Got Hacked. If You Ran npm install Yesterday, Read This Now.

axios. The HTTP client thats in basically every JavaScript project on earth. 100 million weekly downloads. Present in roughly 80% of cloud environment

securitynpmsupplychain
Claude Code's Entire Source Just Leaked. 512K Lines. Here's What I Found.
tutorial

Claude Code's Entire Source Just Leaked. 512K Lines. Here's What I Found.

Anthropic left a source map file in their npm package. The entire Claude Code codebase, 1,900 files and 512,000+ lines of TypeScript, was sitting in p

claudecodesecurityai
Check Point Found Critical RCE Flaws in Claude Code. Here's What You Need to Know.
tutorial

Check Point Found Critical RCE Flaws in Claude Code. Here's What You Need to Know.

If you're using Claude Code — and given that it reportedly has over 15 million commits on GitHub, a lot of you are — you need to stop and audit your p

securityclauderce
The Week AI Coding Went From 'Assistant' to 'Autonomous'. What Happened.
tutorial

The Week AI Coding Went From 'Assistant' to 'Autonomous'. What Happened.

Something shifted in the week of March 23-24, 2026. Not a single product launch or a single announcement — but a convergence of events that, taken tog

aicodingagentsautonomousai
An AI Agent Tried to Destroy a Developer's Reputation. Because He Said No.
tutorial

An AI Agent Tried to Destroy a Developer's Reputation. Because He Said No.

A developer rejected a pull request from an AI agent. The agent retaliated by launching a coordinated smear campaign against him across multiple platf

aisecurityagents
Europe Is Breaking Up with American Tech. Developers Should Pay Attention.
tutorial

Europe Is Breaking Up with American Tech. Developers Should Pay Attention.

France is moving 2.5 million civil servants off Microsoft Teams and Zoom. Not migrating to Slack. Not switching to Google Meet. Moving to a homegrown

eusovereigntycloud
35 New CVEs This Month Were Caused by AI-Generated Code. We Have a Problem.
tutorial

35 New CVEs This Month Were Caused by AI-Generated Code. We Have a Problem.

Somewhere right now, a developer is hitting "Accept All" on an AI-generated code suggestion that contains a SQL injection vulnerability. They'll ship

securityaicve
OpenAI Hit $100M in Ad Revenue in 6 Weeks. ChatGPT Is Becoming Google.
tutorial

OpenAI Hit $100M in Ad Revenue in 6 Weeks. ChatGPT Is Becoming Google.

Six weeks. That's all it took for OpenAI to hit a $100M annualized ad revenue run rate, according to a CNBC report from March 26, 2026. Six weeks to g

openaichatgptadvertising
Qwen 3.5 Small: Four Models, Zero API Cost. A Quick Benchmark.
tutorial

Qwen 3.5 Small: Four Models, Zero API Cost. A Quick Benchmark.

Alibaba just dropped four models and said "here, they're free." The Qwen 3.5 Small family — 0.8B, 2B, 4B, and 9B parameter models — is fully open sour

qwenopensourcelocallm
That SharePoint RCE Is Being Exploited Right Now. Patch Today.
tutorial

That SharePoint RCE Is Being Exploited Right Now. Patch Today.

Stop reading this and go patch your SharePoint servers. Seriously. CVE-2026-20963 is a critical unauthenticated remote code execution vulnerability in

securitysharepointrce
Windsurf's Arena Mode Lets You Blind-Test AI Models. I Tried It.
tutorial

Windsurf's Arena Mode Lets You Blind-Test AI Models. I Tried It.

I'm tired of AI benchmark drama. Every model release comes with cherry-picked evaluations showing it's the best at something. HumanEval scores get gam

windsurfaimodelsdevtools
1 Million Token Context Windows Are a Trap. Here's Why.
tutorial

1 Million Token Context Windows Are a Trap. Here's Why.

Claude Opus 4.6 has a 1 million token context window. Gemini 2.5 Pro supports up to 1 million tokens. GPT-5 offers 256K. The numbers keep going up, an

llmcontextwindowai
Meta Cut 700 Jobs to Bet Everything on AI. Is That Smart?
tutorial

Meta Cut 700 Jobs to Bet Everything on AI. Is That Smart?

On March 25, Meta laid off around 700 employees across Reality Labs, recruiting, and sales. If you've been paying attention to tech layoffs for the pa

metaailayoffs
Cursor Hit 1 Million Daily Users. What Are They Doing Right?
tutorial

Cursor Hit 1 Million Daily Users. What Are They Doing Right?

A code editor built by a startup with fewer than 100 employees just hit 1 million daily active users. Stripe uses it. Figma uses it. Over 50,000 busin

cursoraicodingdevtools
NVIDIA's Nemotron 3 Super: 120B Parameters, 12B Active. Why That Matters.
tutorial

NVIDIA's Nemotron 3 Super: 120B Parameters, 12B Active. Why That Matters.

NVIDIA dropped Nemotron 3 Super at GTC last week and the spec sheet looks like a typo. 120 billion total parameters. 12 billion active at inference ti

nvidianemotronmoe
Google Made Gemini Code Assist Free. What's the Catch?
tutorial

Google Made Gemini Code Assist Free. What's the Catch?

When a company that makes most of its money from ads starts giving away developer tools for free, you should ask questions. Google announced in March

geminigoogleaicoding
I set up a Mac without the App Store and couldn't install my window manager
tutorial

I set up a Mac without the App Store and couldn't install my window manager

Free, open-source macOS window manager with keyboard shortcuts and drag-to-edge snapping.

macosswiftopensource
GitHub Copilot Is Training on Your Private Code Now. You Probably Didn't Notice.
tutorial

GitHub Copilot Is Training on Your Private Code Now. You Probably Didn't Notice.

If you use GitHub Copilot Free, Pro, or Pro+, your code is being used to train AI models starting April 24. Not just your public repos. Your interacti

githubcopilotprivacy
I Bought a Domain by Talking to My AI. No Browser Needed.
tutorial

I Bought a Domain by Talking to My AI. No Browser Needed.

# I Bought a Domain by Talking to My AI. No Browser Needed. Last month I fat-fingered a CNAME record at 2am and took down production for three hours.

mcpdnsdomains
Google Search Console Has a Full API. Why Is Nobody Using It from Their IDE?
tutorial

Google Search Console Has a Full API. Why Is Nobody Using It from Their IDE?

# Google Search Console Has a Full API. Why Is Nobody Using It from Their IDE? I published a blog post, waited three days for Google to index it, the

mcpseogoogle
66 Analytics Tools Your AI Agent Didn't Know It Needed
tutorial

66 Analytics Tools Your AI Agent Didn't Know It Needed

# 66 Analytics Tools Your AI Agent Didn't Know It Needed I check my analytics dashboard maybe twice a week. Which means I miss the spike on Tuesday a

mcpanalyticsumami
Prompt Engineering Is Dead. Harness Engineering Is What Actually Works.
tutorial

Prompt Engineering Is Dead. Harness Engineering Is What Actually Works.

Remember when "prompt engineering" was the hot skill? Write the perfect prompt, get the perfect output. Then we realized that giving the model better

aiharnessengineeringclaudecode
Why Every AI-Built Website Looks the Same (Blame Tailwind's Indigo-500)
tutorial

Why Every AI-Built Website Looks the Same (Blame Tailwind's Indigo-500)

Open three tabs of AI-generated landing pages. Any three. I guarantee at least two of them have a purple gradient, Inter font, rounded cards with subt

aiwebdesigntailwind
123 Ad Tools, Zero Dashboard: Running Meta Ads Entirely from Your Terminal
tutorial

123 Ad Tools, Zero Dashboard: Running Meta Ads Entirely from Your Terminal

# 123 Ad Tools, Zero Dashboard: Running Meta Ads Entirely from Your Terminal Meta Ads Manager has more buttons than a Boeing 747 cockpit. And somehow

mcpfacebookadvertising
I Let My AI Agent Run My Instagram. It Didn't Go Horribly Wrong.
tutorial

I Let My AI Agent Run My Instagram. It Didn't Go Horribly Wrong.

I manage three Instagram accounts. Product shots on Monday, reels on Wednesday, stories on Friday. And honestly? I'm terrible at keeping the schedule.

mcpinstagramthreads
Publishing Chrome Extensions Without Opening Chrome Web Store? Yes, Really.
tutorial

Publishing Chrome Extensions Without Opening Chrome Web Store? Yes, Really.

The Chrome Web Store developer dashboard feels like it was designed in 2014 and never updated. Because it was. If you've ever shipped a Chrome extens

mcpchromeextensions
Claude Code 2.1.83 Dropped an Hour Ago. I Already Found 5 Things That Matter.
tutorial

Claude Code 2.1.83 Dropped an Hour Ago. I Already Found 5 Things That Matter.

Anthropic shipped Claude Code 2.1.83 a few hours ago, and the changelog is massive. Like, "scroll for 30 seconds" massive. Most of it is bug fixes you

claudecodeaidevtools
Your AI Coding Agent Has Root Access. Sleep Well.
tutorial

Your AI Coding Agent Has Root Access. Sleep Well.

Let me paint a picture. Your AI coding agent can read every file in your repository. It can execute shell commands. It has access to your environment

aisecuritydevtools
AI Coding Agents Cost $40/Day Now. Is It Still Worth It?
tutorial

AI Coding Agents Cost $40/Day Now. Is It Still Worth It?

I checked my Anthropic billing last week and nearly choked on my coffee. $847 for March. And it's only the 25th. Here's the thing — I'm not even a he

aicostsdevtools
Claude Code Now Has Voice Mode. I Tried Talking to My Terminal for a Week.
tutorial

Claude Code Now Has Voice Mode. I Tried Talking to My Terminal for a Week.

I'll be honest — when Anthropic announced voice mode for Claude Code, my first reaction was "why?" I have a keyboard. It works fine. Why would I want

aiclaudecodevoicemode
I Ditched VS Code for a Terminal. My RAM Thanked Me.
tutorial

I Ditched VS Code for a Terminal. My RAM Thanked Me.

My VS Code setup used to eat 4GB of RAM before I even opened a file. Extensions, integrated terminal, GitHub Copilot, a couple of preview panes -- and

terminalproductivityai
I Haven't Opened the npm Website in Months. Here's How.
tutorial

I Haven't Opened the npm Website in Months. Here's How.

There's a special kind of friction that comes from typing `npm publish`, getting a 2FA prompt, fumbling for your phone, missing the 30-second window,

mcpnpmjavascript
I Haven't Opened the npm Website in Months. Here's How.
tutorial

I Haven't Opened the npm Website in Months. Here's How.

There's a special kind of friction that comes from typing `npm publish`, getting a 2FA prompt, fumbling for your phone, missing the 30-second window,

mcpnpmjavascript
Cursor Just Made ripgrep Look Slow. Here's How.
tutorial

Cursor Just Made ripgrep Look Slow. Here's How.

I've been using `ripgrep` for years. It's the kind of tool that makes you feel smug about your workflow -- blazing fast, zero complaints. Then Cursor'

cursorregexperformance
Your AI Can Submit Apps to the App Store Now. No, Seriously.
tutorial

Your AI Can Submit Apps to the App Store Now. No, Seriously.

I spent 45 minutes uploading screenshots to App Store Connect last Tuesday. Different sizes for every device. 6.7-inch, 6.5-inch, 5.5-inch — because a

mcpappstoregoogleplay
How to Make Claude, Codex, and Gemini Collaborate on Your Codebase
tutorial

How to Make Claude, Codex, and Gemini Collaborate on Your Codebase

What if your AI coding agents could ask each other for help when they get stuck? Here is how to set up multi-agent collaboration in under 2 minutes.

aiproductivitytypescript
Recreating Windows XP in React: Why Devs Keep Building OS Clones
tutorial

Recreating Windows XP in React: Why Devs Keep Building OS Clones

A deep dive into building Windows XP in React — why OS clone projects teach you more about frontend development than most tutorials ever will.

reacttypescriptfrontend
Grafeo: An Embeddable Graph Database in Rust That Actually Makes Sense
tutorial

Grafeo: An Embeddable Graph Database in Rust That Actually Makes Sense

Grafeo is a new embeddable graph database built in Rust. Here's what it does well, where it falls short, and whether you should use it yet.

rustgraph-databaseembedded-database
TapMap Finally Lands on Linux and Docker — Here's Why That Matters
tutorial

TapMap Finally Lands on Linux and Docker — Here's Why That Matters

TapMap now supports Linux and Docker. Here's how to set it up, where it fits in your stack, and what to watch out for.

devopsdockerlinux
Flash-KMeans Dropped and It Makes sklearn Look Slow
tutorial

Flash-KMeans Dropped and It Makes sklearn Look Slow

Flash-KMeans brings Flash Attention-style optimizations to K-Means clustering — 5-16x faster with less memory. Here's what it means for your ML pipelines.

machine-learningalgorithmspython
How to Add Google Login to Next.js with Authon
tutorial

How to Add Google Login to Next.js with Authon

A step-by-step guide to implementing Google OAuth login in your Next.js application using the Authon SDK. From project setup to production deployment.

nextjsoauthgoogle
Claude Code Channels: Control Your AI Coding Agent from Telegram
tutorial

Claude Code Channels: Control Your AI Coding Agent from Telegram

Learn how to set up Claude Code Channels to send messages and receive responses from your running Claude Code session via Telegram.

claudecodeaitelegram
How to Build a Real-Time Chat App with WebSockets (And Why It Works)
tutorial

How to Build a Real-Time Chat App with WebSockets (And Why It Works)

Learn why WebSockets are the standard for real-time chat apps, with working code examples and production-ready tips for persistent connections.

websocketsreal-timechat-applications
How to Handle Android's New 24-Hour Sideloading Delay in Your APK Distribution
tutorial

How to Handle Android's New 24-Hour Sideloading Delay in Your APK Distribution

Google's new 24-hour sideloading delay for unverified APKs breaks common distribution workflows. Here's how to fix your pipeline.

androidmobile-developmentapk-distribution
Passkeys Are Ready. Here Is How to Add Them to Your App
tutorial

Passkeys Are Ready. Here Is How to Add Them to Your App

I finally added passkey support to a side project last month, and I'm kicking myself for not doing it sooner. The UX improvement is dramatic — users authenticate with a fingerprint or face scan instead of typing a password. Here's how to implement it...

Why ShadowDOM Matters More Than You Think
tutorial

Why ShadowDOM Matters More Than You Think

I used to think ShadowDOM was a niche feature for people building custom elements nobody asked for. Then I started building embeddable widgets and design system components, and suddenly ShadowDOM became the most useful tool in my toolkit. Here's why ...

5 Authentication Patterns Every Web Developer Should Know in 2026
tutorial

5 Authentication Patterns Every Web Developer Should Know in 2026

Web authentication has evolved dramatically. What used to be "just hash the password and store a session" now spans half a dozen distinct patterns, each with real trade-offs. After building auth systems across multiple projects, here's my breakdown o...

Tutorials | Authon Blog