Developer open-sources SaaS boilerplate with real multi-tenancy and row-level security

·1 views

A developer has released an open-source SaaS starter kit called saas-root, built after repeatedly writing the same authentication, team management, and permissions code across multiple projects. The boilerplate addresses a common shortcoming in existing solutions — fake multi-tenancy that relies on application-level filters rather than true database isolation. It implements PostgreSQL Row-Level Security to enforce data boundaries at the database layer, ensuring users cannot access another organisation's data even if application code contains bugs. Granular permissions are handled via the CASL library, allowing role-specific rules such as members editing only their own tasks. The project also abstracts email delivery behind a provider interface, currently supporting Resend, SMTP, and a console logger for development.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Research Lab Repels LLM-Driven Cyberattack by Turning the AI Against Itself

A research lab reported being targeted by a cyberattack built around a large language model, marking a notable shift from theoretical AI security research to a real-world incident. Rather than simply blocking the attack, the lab claims it reversed the AI's methods and used them against the attacker. Security analysts note that while AI-versus-AI offense-defense loops are not structurally new, the key development is an LLM autonomously adapting its attack strategy in real time based on target responses. Critics caution that framing the incident around the model's national origin obscures more important questions about how the LLM was weaponized and what defensive techniques actually worked. Security teams are advised to log all API activity, rate-limit aggressively, and avoid exposing error details that an adaptive, LLM-driven attacker could use to refine subsequent attempts.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Builds AI Social Media Tool 'Bleam' With Free Scheduling and Paid Content Generation

A former Jakarta agency founder is developing an AI-powered social media tool called Bleam, designed to automate content creation, scheduling, and DM responses for small businesses and agencies. The platform offers free scheduling across Instagram, TikTok, and Google Business Profile, along with basic caption generation and an Instagram audit tool requiring no signup. Paid features include full monthly content generation, comment-to-DM automation, multiple workspaces, and white labeling, primarily targeting agencies managing several client accounts. The developer explained that scheduling is free because platforms like Meta already offer it at no cost, while content generation sits behind a paywall because AI inference carries a real per-user cost. The tool is currently pre-launch with no live users, and the founder acknowledged uncertainty about whether the free tier is compelling enough to drive organic growth.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

AWS Kiro Promotes Spec Coding to Address Gaps Left by AI Vibe Coding

Vibe coding, a development style where software is built through conversational AI prompts, has gained popularity for rapidly turning ideas into working applications. However, as projects scale, developers face growing challenges maintaining coherence, context, and architectural consistency across the codebase. AWS Kiro introduces a contrasting approach called Spec Coding, which requires AI to first define requirements, design, and intent before generating any code. This specification-driven workflow keeps structured documentation alongside the codebase, reducing the need to reconstruct project context with every new prompt. The approach aims to make AI act more like a software engineer than a code generator, particularly for production-grade systems.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How the Plan-Act-Observe Loop Powers AI Agents in Software Development

AI agents are autonomous programs that use artificial intelligence to perform tasks such as code reviews, debugging, and optimization without constant human input. At their core, these agents operate on a plan-act-observe loop, a three-stage cycle in which the agent first determines what action to take, then executes it, and finally evaluates the outcome to refine its next move. This iterative feedback mechanism allows AI agents to continuously improve their responses based on real-time results. Developers can build such agents using cloud tools like AWS Lambda combined with relevant SDKs to automate repetitive coding workflows. The approach represents a growing shift in software development toward AI-assisted automation of routine engineering tasks.

0 comments Read more at DEV Community