Developer Fixes Mezzio Library Bug That Regenerated Session IDs on Every Write

·1 views

A developer building a cross-language session-sharing system between a PHP/Mezzio app and a second backend discovered that every authenticated request was generating a new session ID. The root cause was traced to the Mezzio session-cache library's CacheSessionPersistence, which regenerated the session ID on every data write as a defense against session fixation attacks. While this aggressive rotation is harmless in single-application setups, it broke the shared Redis session contract in a distributed architecture, leaving the second backend holding a stale ID pointing to a deleted session. The developer submitted a pull request to the mezzio/mezzio-session-cache repository to address the issue, which had also been independently reported by other users experiencing session loss on failed responses.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Flutter Core Widgets Guide Part 1: 50 Essential Widgets With Code Snippets

A developer on DEV Community has published a reference guide covering approximately 50 of the most commonly used Flutter widgets, organized by category. The categories include basic widgets, layout, scrolling and lists, buttons, input and forms, structural and material components, feedback and overlays, navigation, and more. Each widget entry provides a short description, a runnable code snippet, and a text-based description of how it renders on screen. The guide is designed for Flutter developers who want a quick, practical reference without needing to consult full documentation. Code snippets can be opened and tested directly in DartPad, though users are advised to allow 5 to 10 seconds for the environment to load.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Azure Policy can block dangerously broad blob lifecycle rules in storage accounts

Azure Blob Storage lifecycle rules without filters such as prefixMatch or blobIndexMatch apply to every blob in a storage account, risking unintended deletions or tier transitions. A developer encountered this risk while working on automated blob cleanup and sought a preventive guardrail rather than relying solely on code reviews. Azure Policy can be configured to target storage account management policies and deny any lifecycle rule that lacks the required filters. A custom policy definition, written in Bicep, checks for missing filter fields and blocks the change if at least one unscoped rule is detected. This approach enforces safer defaults especially in shared development or test environments where manual portal changes can bypass standard review processes.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Automated Restore Verification Turns Untested Backups Into Proven Safety Nets

A software engineer revealed that years of nightly backups were never actually tested by restoring them, exposing a critical gap between a backup job running successfully and the backup being genuinely usable. The green checkmark on a backup job only confirms the process completed, not that the resulting files can be restored into a working system. Using Claude Code, the engineer built an automated workflow that verifies every backup shortly after it is taken, capturing proof of restorability rather than assuming it. The approach addresses a well-documented failure pattern where organisations lose data despite having backups, simply because the restore path was never exercised. By making restore verification a scheduled routine rather than a rare drill, the workflow eliminates the hidden risk that accumulates when backup outputs go untested for months or years.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Pure-C TTS engine gains Metal and CUDA GPU backends with major speed gains

Developers have added two optional GPU backends — Apple Metal and NVIDIA CUDA — to qwen3-tts, a pure-C inference engine for the Qwen3-TTS model, while keeping the default CPU path unchanged. On Apple Silicon, the Metal backend reduced the 0.6B model's real-time factor from 1.5 to 0.60 on an M1 and 0.36 on an M2 Pro, with streaming first-audio latency of 314 milliseconds. The CUDA backend achieved an RTF of 0.44 on an RTX 4060-class GPU, scaling down to approximately 0.12 on an RTX 4090. Key performance gains came from keeping weights, KV cache, and activations resident on the device and encoding full decode steps into a single command buffer rather than offloading individual operations. Server-side request batching further improved throughput by roughly 2.8x on Metal and 3.35x on CUDA, allowing multiple concurrent users to be served in approximately the time of a single request.

0 comments Read more at DEV Community