Interactive Simulators Help Developers Master TLS Handshakes and OAuth Flows

·18 views

Two free browser-based simulators aim to help backend developers learn the TLS handshake and OAuth authorization code flow by stepping through each sequence interactively, rather than studying static diagrams. The TLS simulator covers both TLS 1.2 and 1.3 protocols, highlighting key differences such as the single round trip and post-ServerHello encryption introduced in 1.3, while also letting users simulate failure scenarios like expired certificates, hostname mismatches, and untrusted certificate chains. The OAuth simulator walks developers through the full authorization code flow with PKCE, covering every party — the app, user, authorization server, and API — and showing exactly what data moves across each channel. A core learning point is understanding which secrets, such as the authorization code versus tokens, are exposed in the browser-facing channel versus the back-channel token exchange. Both tools require no signup and are intended to build the kind of hands-on familiarity that helps developers debug real-world security errors under pressure.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Lens Extension Captures Screenshots and Step Guides Entirely in Your Browser

A developer has released Lens, a free Chrome and Edge browser extension that enables screenshot capture, annotated step-by-step guides, and GIF or MP4 recording without requiring an account or uploading data to any server. All processing happens locally in the browser, and features such as annotation tools, editable markup, and guide export remain fully free. Before saving, the extension automatically scans captured content for sensitive data like passwords, API keys, and card numbers, flagging them for optional blurring without sending anything over a network. Step-by-step guides are generated from a page's own accessibility labels rather than AI, and can be exported as self-contained HTML files, PDFs, Markdown, or rich text for tools like Confluence and Notion. A paid licence only removes a watermark and occasional reminder, leaving all core functionality intact.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Why AI Agent Summaries Can Mislead and How Event Logs Fix It

A multi-agent AI pipeline broke down when a verifier agent began relying on another agent's summary rather than independently checking the underlying work. The summary stated a bug was fixed and tests passed, but the fix had introduced an edge case that existing tests did not cover. Because the verifier trusted the compressed summary instead of the actual code, the flawed fix went undetected. The team resolved this by logging every agent action as an immutable event, allowing the verifier to reconstruct intent from the full event chain rather than a summary. The key takeaway is that summaries are interpretations and can lose critical information, while the event log remains the only reliable source of truth.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer builds 116 browser-based tools that process data entirely offline

A developer launched 123MiniApps, a collection of 116 small utility tools — including a JSON formatter, image converter, and PDF generator — after growing frustrated with ad-heavy, account-gated alternatives for simple tasks. Every tool runs entirely within the browser, meaning no user data is ever sent to an external server, a claim users can verify themselves via the browser's Network tab. The project was built using native browser APIs such as the Canvas API and Web Crypto API, avoiding third-party libraries and server-side processing. All 116 pages were generated using Python build scripts and a shared component toolkit, ensuring consistent design and making it straightforward to add new tools. The site is available for free at 123miniapps.online, and the developer says he is actively seeking user feedback on which tools are most useful and what is missing.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Builds Scalable Broken Link Scanner Using Laravel and Go

A software developer has built a production-grade broken link scanner designed to handle large websites, using Laravel as the application control plane and Go as the concurrent scanning engine. The system addresses real-world crawling challenges such as duplicate URLs, redirects, rate limits, and malformed HTML that simple scripts cannot manage. Go workers independently lease scan jobs from Laravel via an API, process them concurrently, and report results in batches, allowing additional scanner servers to be added without modifying the web application. The crawler normalizes discovered URLs to prevent duplicate requests and separates internal page traversal from external link checking to avoid unbounded crawling. Concurrency is managed at multiple levels, including per-worker scan limits, worker pools, global HTTP request caps, and per-host rate controls to avoid overwhelming target servers.

0 comments Read more at DEV Community