← HomeSupabase creates a user and mails a code for any address it has not seen, so a script pointed at /auth/v1/otp turns your sender into a mail cannon. A honeypot cannot see it and project-wide CAPTCHA breaks every installed build of your mobile app. A Before User Created hook does the job.
Google sign-in through Supabase worked on Android and on the web, and failed on iOS with a generic error. The iOS SDK now puts a nonce in every ID token, and the React Native wrapper never tells you what it was.
Service Quotas said my limit was 25 apps. I had 5. Amplify still refused to create a new one. The real limit is hidden, and the fix takes two minutes.
Self-hosting umami analytics on AWS Amplify sounds simple until the build fails three times. Here is every error I hit and how I fixed each one.
halit.ca scored 49 on Lighthouse with WordPress. Here's why I rebuilt it from scratch with Next.js and MDX.
Building a serverless reply-by-email pipeline using AWS SES, S3, and Lambda to turn email replies into portal comments.
Fixing Node.js version incompatibility in AWS Amplify when dependencies like jwt-decode require v18+.