Authentication

H5 Web OAuth Popup Login: From Popup Blocking to Three-Channel Redundancy Complete Implementation

In-depth analysis of the complete implementation of H5 Web OAuth popup login, including synchronously opening a blank popup to bypass blockers, three-channel Token redundant communication (postMessage + StorageEvent + localStorage polling) to solve Chrome background tab throttling issues, and full-process bug debugging experience summary.

NestJS JWT + RBAC Permission System in Practice: From Open APIs to Fine-Grained Access Control

The blog system's management interfaces have evolved from a completely open state to a two-tier protection system of JWT authentication + RBAC permissions, covering the complete implementation of AdminJwtAuthGuard, PermissionsGuard, @RequirePermission decorator, and RolePermissions configuration.

Next.js Blog Bookmark Feature: Complete Implementation of Auth Integration and State Synchronization

Next.js Auth Zero-Flicker in Practice: Dual-Mode Architecture Eliminates Hydration Flicker

Next.js Blog Triple Login System: Complete Implementation of Email Verification Code + Google OAuth + Facebook OAuth

Deep Link OAuth + GlobalOAuthHandler: Unified Authentication Entry Architecture

A unified processing architecture for deep links, universal links, and OAuth callbacks in Flutter, covering authentication gating, route resolution, and deferred navigation.

Email Notification Service: Resend Integration for Admin Application Process

JoyMini API's email notification service is built on Resend, focusing on approval notifications for the admin application process, covering single-method service design, HTML template engine, and error handling implementation.

Full-Stack Authentication System — API JWT Dual Secret + Flutter AuthNotifier + admin-next Edge Middleware + Cookie Guard

Tracking the complete lifecycle of authentication tokens across three platforms: API issuance and verification (Passport JWT + Dual Secret Strategy) → Flutter secure storage and state machine refresh → admin-next Edge Middleware Cookie route guard and HTTP interceptor automatic refresh

Zustand Auth Store + SSR Hydration — Three-Store Architecture for Admin Dashboards

The admin dashboard uses three Zustand Stores (useAuthStore, useAppStore, useToastStore) to manage authentication state, UI preferences, and global notifications respectively, achieving server-side rendering compatibility through different persistence strategies and SSR safety modes.

Middleware JWT Route Guard — Authentication Defense Line Under Edge Runtime

The admin backend implements route-level JWT authentication guard via Middleware under Edge Runtime, performing server-side verification before requests reach the page, forming the first barrier of a two-layer security defense.