ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
Public clients can't keep secrets. Learn how PKCE (Proof Key for Code Exchange) secures OAuth 2.0 flows for SPAs and mobile apps by replacing static secrets with dynamic, one-time verifiers.
Learn how to preserve form state across navigation in Inertia.js using useRemember, with a Vue 3 example, limits, and verification steps.
How to fetch and post JSON in a Mithril SPA using m.request: correct config keys, explicit HTTP error handling with extract, and what Mithril deliberately does not manage for you.
When Puppeteer waits for navigation in a single‑page application (SPA) that changes URLs via history.pushState, the script can hang or timeout. This guide shows how to identify the root cause, run ordered checks, apply fixes, and know when to escalate.
An architecture note on building a Mithril SPA with just m.route resolvers and the auto-redraw system: requirements, trust boundaries, failure modes, and verification checks.
Learn how to protect SPA backends by using OAuth 2.0 Authorization Code Flow with PKCE, storing tokens in httpOnly cookies and avoiding implicit‑flow leaks.
Learn how to make Framework7 routes bookmarkable by enabling pushState and configuring a server fallback for deep links.
When building a SPA with Okta, the Authorization Code Flow with PKCE is the secure, recommended choice. This guide compares Implicit, Auth Code PKCE, and Hybrid flows, explains trade‑offs, and walks through a concrete implementation using @okta/okta-auth-js.
React Router's loader and action APIs eliminate render-then-fetch waterfalls by loading data before routes render. Here's how to implement the smallest viable design with proper error handling and verification steps.
javascript
framework7
okta
reactrouter