AL

Alexandre Awadallak

Ingeniero construyendo productos full-stack en Next.js.

Publicaciones de Alexandre Awadallak

Publicaciones de Alexandre Awadallak

Building SaaS Auth from Scratch
engineering

Building SaaS Auth from Scratch

A deep dive into session management, 2FA, and magic links for multi-tenant applications

1 min read
Primeros Pasos con AtendePraMim
guías

Primeros Pasos con AtendePraMim

Aprende a configurar tu primer proyecto con el boilerplate AtendePraMim

1 min read
Scaling Your SaaS with Redis
engineering

Scaling Your SaaS with Redis

How to use Redis for sessions, rate limiting, job queues, and real-time features

1 min read
Webhook signing with HMAC
engineering

Webhook signing with HMAC

Verifying the sender of incoming webhooks with HMAC signatures — the pattern Stripe, GitHub, and every mature provider uses.

2 min read
Rate limiting strategies that actually scale
engineering

Rate limiting strategies that actually scale

Token buckets, sliding windows, and Redis — the real patterns behind production rate limits.

2 min read
Multi-tenant database design
engineering

Multi-tenant database design

Shared schema, schema-per-tenant, or database-per-tenant — picking the model before the first row lands.

2 min read
Background jobs with BullMQ
engineering

Background jobs with BullMQ

Queues, retries, and the outbox pattern — running async work in a way that survives crashes and redeploys.

2 min read
Stripe webhooks and idempotency
engineering

Stripe webhooks and idempotency

Why your invoice handler runs three times, and how to make that OK.

2 min read
Preventing SSRF in file uploads
security

Preventing SSRF in file uploads

Why your image proxy is one webhook away from probing the AWS metadata endpoint.

2 min read
Designing OAuth2 scopes
security

Designing OAuth2 scopes

Why `user:read` isn't enough, and how to scope tokens without painting yourself into a corner.

2 min read
Session cookies vs JWTs
security

Session cookies vs JWTs

The debate is over. For browser auth in 2026, use encrypted session cookies.

2 min read
i18n in the App Router with next-intl
guides

i18n in the App Router with next-intl

Locale routing, server translations, and the gotchas that bite every team once.

2 min read
Zero-downtime Postgres migrations
engineering

Zero-downtime Postgres migrations

Adding columns, renaming tables, and changing types without taking the site down.

2 min read
Observability without the enterprise price tag
engineering

Observability without the enterprise price tag

Structured logs, three golden metrics, and a couple of tracing spans — enough to debug production at 2am.

2 min read
Email deliverability for SaaS products
guides

Email deliverability for SaaS products

SPF, DKIM, DMARC — and why your transactional email is landing in spam even though you did everything the docs said.

2 min read