X

How to Implement OAuth 2.0 with PKCE in Browser-Based Apps

If a browser application needs permission to call an API on a user's behalf, use the OAuth 2.0 authorization code…

Best Privacy-Friendly Web Analytics for Small Websites

You can learn which pages attract visitors without building a profile of every person who visits your website. The right…

How to Set Up SPF, DKIM, and DMARC for Transactional Email

Password resets, receipts, account alerts, and form confirmations are part of your website's product. If these messages are rejected or…

How to Implement Resumable File Uploads in Web Applications

A resumable upload lets a web app continue sending a large file after a network interruption instead of making the…

How to Add Web Push Notifications to a Web App

Web Push lets your server ask a browser to deliver a message to a service worker, even when the app…

How to Use the Web Crypto API for Browser-Side Encryption

The Web Crypto API lets a browser encrypt data before it is stored or sent elsewhere. That can be useful…

How to Build Offline-Capable Web Apps with Service Workers & IndexedDB

An offline-capable web app should make it clear what still works when a connection drops. A service worker can keep…

HTTP Security Headers for Small Web Applications: A Practical Rollout Guide

HTTP security headers let a web application tell browsers how to handle resources, browser features, referrers, and framing. They are…

How to Publish npm Packages with GitHub Actions Trusted Publishing

You can publish an npm package from GitHub Actions without storing a long-lived npm publish token in repository secrets. npm's…

How to Use the View Transitions API for Single-Page and Multi-Page Websites

A route change does not have to feel like a hard cut. The browser's View Transitions API can animate the…