Guides

Short notes on the small stuff

The kind of practical detail that trips people up: encoding gotchas, token safety, regex tricks, all written to be read in a coffee break.

Reading a JWT without fooling yourself

Decoding a JSON Web Token shows its claims, but not whether to trust them. Understand the difference between decoding and verifying a JWT, and why it matters.

2 min read jwt security tokens

Base64 and Unicode, the part that bites you

Naive Base64 encoding mangles anything beyond ASCII. Learn why it breaks and the one UTF-8 step that makes emoji and accents survive the round trip every time.

1 min read base64 unicode encoding