Dev fixes silent auth redirect failure and FK mismatch in Next.js/NestJS monorepo

·1 views

A developer working on a Next.js and NestJS monorepo identified two critical bugs that surfaced in production HAR logs on August 28, 2026. The first issue involved AuthGuard using router.replace() for expired JWT redirects, which failed silently in Next 13's app router when components unmounted, leaving users stuck on broken pages. The fix replaced the unreliable client-side navigation with Next 13's server-side redirect() helper, ensuring a proper HTTP 302 response before any client code runs. The second bug was a foreign-key typo in the sales-pipeline database table that referenced the wrong table name, causing empty pipeline lists despite data being present. Correcting the schema and regenerating the ORM resolved both issues, eliminating hidden 401 and 404 errors that the frontend had been silently swallowing.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

How AI Refactoring Tools Can Silently Break Legacy Code — And How to Catch It

A software developer demonstrated a workflow for safely using AI-generated code refactors on legacy functions that lack formal specifications. The approach involves first capturing the existing function's behavior by recording inputs and outputs as a 'ground truth' baseline, then prompting a free AI coding model to refactor the code while keeping behavior identical. Characterization and differential tests are then run against both the original and refactored versions to detect any divergence. In one test case, the AI changed a single comparison operator — from 'less than or equal to' to 'less than' — which silently flipped a shipping charge from zero to $4.99. The article concludes that AI-generated diffs should be treated as hypotheses requiring test-based verification, not trusted on appearance alone.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

AI Collaboration Tools Help Remote Dev Teams Resolve Tasks 42% Faster in 2026

By 2026, 81% of tech companies operate partially or fully remote, yet 26% of software teams still miss critical deadlines due to miscommunication despite using multiple tools, according to Gartner. AI-powered platforms are increasingly seen as essential, with Atlassian reporting that teams using AI-driven collaboration tools resolve tasks 42% faster than those that do not. Tools like Microsoft Teams Copilot, Standuply, and Notion AI automate meeting summaries, generate tickets, update documentation, and flag blockers in real time. A case study from Xero found that adopting AI standup tools cut weekly standup time from 45 to 16 minutes and improved sprint velocity by 29%. Experts caution against stacking too many tools or blindly trusting AI-generated outputs, recommending human oversight especially for critical documentation and code reviews.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Humanoid robots break Bolt's 100m record as billions flood robotics sector

At China's World Humanoid Robot Games, humanoid robots broke Usain Bolt's 100-meter world record three times in two days, with one robot also winning the long jump at 7.97 meters. Hugging Face launched a $399 desktop robot called the Microduck, which went viral and generated over a million dollars in sales, while Nvidia is reportedly in talks to acquire the company for around $13 billion. Robotics startup Generalist reached a $3 billion valuation after raising nearly $200 million, with its latest model enabling robots to learn tasks from video clips as short as three seconds. SoftBank is reportedly negotiating a majority stake in humanoid maker 1X Technologies at a $6 billion valuation, reflecting surging investor interest in the sector. However, concerns about a potential bubble persist, as Unitree's stock has fallen 45% from its post-debut peak amid China's robotics boom.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Bybit's $16B On-Chain Infrastructure Flagged for Five Critical Security Risks

A security analysis by a senior DeFi research team, dated October 26, 2023, examined the smart contract vulnerability surface of Bybit, a major centralized exchange with $16.05 billion in total value locked on Ethereum and Layer 2 networks including Arbitrum and Optimism. The report identified five critical or high-risk attack vectors threatening user funds held in Bybit's on-chain smart contracts. Key risks include oracle price feed manipulation that could trigger false liquidations in perpetual futures markets, and compromise of admin or multi-sig keys that could allow attackers to drain collateral or halt withdrawals. Additional vulnerabilities were flagged in cross-chain bridge infrastructure used to move assets between supported networks. Researchers noted that Bybit's hybrid model — where on-chain contracts handle collateral while off-chain systems manage order matching and risk — creates unique trust assumptions that amplify these risks.

0 comments Read more at DEV Community