Six Checks to Stop Silent Logouts in Next.js and Supabase Auth Cookies

·9 views

AI-generated Next.js apps using Supabase often work on localhost but log users out right after production deployment. The article attributes most of these failures to cookie configuration, middleware session refresh, or mismatched Preview and Production environment settings rather than a Supabase outage. Key recommendations include matching the cookie domain to the production host, requiring Secure cookies over HTTPS, and keeping each environment tied to its intended Supabase project. The piece also advises refreshing sessions in middleware, listing all Preview and production URLs in Supabase, and checking that login and callback routes are not caught in redirect loops. It closes with a five-step verification routine to confirm that session behavior is stable after deployment.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Guide Explains Using Security Headers to Shield Production Websites

A technical guide on DEV Community explains how security headers can strengthen production websites against common attacks. It highlights Content Security Policy for limiting permitted content sources, which helps block cross-site scripting. It also covers HTTP Strict Transport Security for forcing encrypted HTTPS connections and secure cookie flags that restrict JavaScript access to sensitive cookies. The article adds best practices such as applying headers across all production sites, reviewing them regularly, and testing them with online validation tools.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Stray zero-width spaces in Android app translations mostly enter via repositories, not Weblate

A census of F-Droid app translations found that Weblate-hosted apps contain about a quarter as many stray zero-width spaces as other apps. Tracing 90 such characters in 23 Weblate apps showed none were added by a Weblate commit, with most arriving alongside new strings or languages. Sources included translation commits, syncs from Localazy, Crowdin and Transifex, and code copied from other projects. A control check confirmed the detection method could catch Weblate-saved characters, and the authors report that predictions about six languages where the character is legitimately used largely failed. The authors publish these results as negative findings and suggest flagging the 'space plus two zero-width spaces' pattern, while noting the evidence is thin in those languages.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Gamma vs Canva for AI Presentations in 2026: Which Suits Makers Best

The article compares Gamma and Canva Magic Studio for creating AI-assisted presentations in 2026, noting they share a feature category but serve different purposes. Gamma is presented as the better choice when the main challenge is quickly producing a coherent first draft from a brief, outline, or PDF, and when a shareable web link is acceptable as the deliverable. Canva is recommended when presentations are part of a broader brand system that includes social media, ads, and one-pagers, and when pixel-level control and Brand Kits matter. The author suggests many freelancers and consultants may use both tools, starting in Gamma for structure and moving to Canva for multi-asset brand consistency. The piece also outlines a basic workflow for Gamma and cautions that exports may not perfectly preserve certain design effects.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

New Free Tool Strips Hidden Location and Device Data From Photos Without Uploading Them

A developer has released Drop Metadata, a free tool that removes hidden metadata such as GPS coordinates, device details, timestamps, and camera serial numbers from photos and videos. Phone images often carry this embedded information, which can reveal where a person took a picture, even when the image itself looks harmless. Unlike many similar services, the tool processes files entirely on the user's device, so nothing is sent to a server. It removes metadata by rewriting only the metadata sections, leaving the image or video data unchanged and avoiding quality loss. The tool supports JPG, PNG, MP4, and MOV files, and an Android version works offline.

0 comments Read more at DEV Community