Writing
Writing
Technical deep-dives, tutorials, and perspectives on software engineering, tooling, and building products.
56
posts published
56 articles total
HTTP QUERY Method: The Safe GET With a Body (RFC 10008)
The HTTP QUERY method (RFC 10008) gives you a safe, idempotent, cacheable request with a body. What it fixes, how caching works, and who supports it today.
How to Build a Stateless MCP Server for the 2026-07-28 Spec
Step-by-step build of a stateless MCP server using the 2026-07-28 spec. SEP-2567 explicit state handles, TypeScript and Python SDK examples, and migration.
How to Upgrade Next.js for May 2026 Security Release (13 CVEs)
Next.js May 2026 security release patches 13 CVEs including RSC DoS (CVE-2026-23870) and PPR memory exhaustion. Step-by-step upgrade to 15.5.18 or 16.2.6.
iOS 27 for Developers: Breaking Changes and New APIs
iOS 27 for developers: breaking changes, deprecations, Liquid Glass, Core AI, and Foundation Models APIs you need to handle before you recompile in Xcode 27.
S3 Glacier Instant vs Flexible vs Deep Archive: Cost and Speed
S3 Glacier Instant vs Flexible vs Deep Archive compared: retrieval times, restore tiers, minimum durations, and real us-east-1 costs to pick the right class.
How to Add Custom MCP Tools to Your Slack AI Bot
How to extend a Slack AI bot driven by Codex, Claude Code, or Cursor with custom MCP tools: build a FastMCP server in Python, wire it per-agent, gate destructive calls behind Slack approvals.
How to Migrate Vercel AI SDK 5 to 6: Breaking Changes Guide
Step-by-step Vercel AI SDK 5 to 6 migration. Codemod walkthrough, useChat parts model, ToolLoopAgent replacement for streamText, and tool approval.
How to Build a Self-Hosted Slack AI Bot with any CLI Agent
How to build a self-hosted Slack AI bot driven by any CLI agent: Socket Mode app, Python glue, token streaming, Approve and Deny buttons, session resume across Codex and Claude Code.
10 Best Claude Skills for Developers in 2026
10 best Claude skills for developers in 2026. Real picks I use every week, ranked by impact and GitHub stars, with direct install links for each.
How to Set Up Sanity Studio in Next.js 16 (Embedded Dashboard)
How to set up Sanity Studio in Next.js 16 step by step: install next-sanity, mount the embedded /studio route, write a real post schema, query from a Server Component, fix CORS, and deploy to Vercel.
How to Version REST APIs in Spring Framework 7 (Spring Boot 4)
Spring Framework 7 API versioning is built in. Learn the version attribute, all four resolver strategies, baseline versions, and Sunset deprecation headers.
How to Set Up an SSH Tunnel for Local Database Access
Set up an SSH tunnel to reach a remote Postgres, MySQL, or Redis from your laptop without exposing the database port. With autossh and a systemd unit.
Spring AI 2.0 MCP Annotations: From Tool to Production
Spring AI 2.0 MCP annotations tutorial: build a production MCP server with @McpTool, async progress reporting, Streamable HTTP transport, and Claude Code wiring.
Why MCP 2026-07-28 Spec Drops Sessions and Goes Stateless
MCP 2026-07-28 spec release candidate drops sessions for a stateless protocol core. Here is why it changed, what breaks, and how to plan your migration.
TanStack npm Supply Chain Attack 2026: How OIDC Beat SLSA
On May 11, 2026, attackers hijacked TanStack's release pipeline mid-build to publish 84 malicious npm packages with valid SLSA provenance. Here's how.
PostgreSQL 18 Temporal Foreign Keys with Spring Boot JPA
PostgreSQL 18 temporal foreign keys with Spring Boot: WITHOUT OVERLAPS, PERIOD clause, Hibernate daterange mapping, and the ON DELETE gotcha nobody mentions.
Spring Boot 4 AOT Data Repositories: The Underrated Feature
Spring Boot 4's AOT data repositories generate query implementations at build time, cutting startup and unlocking GraalVM native image support.
Java 26 Structured Concurrency: What Changed in the Sixth Preview
Java 26's JEP 525 refines structured concurrency with a new onTimeout joiner and List return types. Practical guide with code and virtual thread patterns.
Claude Code Routines: Async CI Automation Just Became Real
Claude Code Routines automate PR reviews, CI fixes, and nightly triage on Anthropic's cloud. Here's everything that shipped at Code with Claude 2026.
Next.js 16.2 AGENTS.md and next-browser: A Hands-On Guide
Next.js 16.2 ships AGENTS.md by default, bundles the full docs in node_modules/next/dist/docs, and adds next-browser CLI for AI agents. Hands-on guide.
Postgres Connection Pool Sizing: How PgBouncer Saved My Launch
A real war story on Postgres connection pool sizing: why pool=500 nearly killed my launch, and how PgBouncer transaction mode multiplexed 5000 clients onto 25 backends.
Vercel AI Gateway: One Key for Every LLM, With BYOK Support
Vercel AI Gateway unifies hundreds of AI models behind one API key with fallbacks, BYOK, and zero markup. A hands-on deep dive with AI SDK v6 code.
Java 26 HTTP/3 in the HttpClient: A Complete Developer Guide
Java 26 HTTP/3 ships in the built-in HttpClient via JEP 517. Learn the opt-in API, Http3DiscoveryMode, fallback behavior, and HTTP/2 benchmarks.
Claude Opus 4.7 API Pricing, Benchmarks & Breaking Changes 2026
Claude Opus 4.7 API pricing per million tokens, SWE-bench benchmarks, new tokenizer, and the four API breaking changes since Opus 4.6. Full migration guide.
Claude Skills vs MCP vs Projects: Which One Should You Use?
Claude Skills, MCP servers, and Projects solve different problems. Here is the honest comparison, token costs, and a decision framework for picking right.
Amazon S3 Files: AWS Just Turned Object Storage Into a File System
S3 Files lets you mount S3 buckets via NFS with sub-millisecond latency. Here is how it works, what it costs, and why AWS also killed SSE-C by default.
Claude Mythos and Project Glasswing: Anthropic's Locked-Down AI Model
Anthropic's new Claude Mythos model scores 93.9% on SWE-bench Verified and finds zero-days autonomously. Here is why it is not getting a public release.
Why I Replaced useEffect Data Fetching with Server Actions
I ripped useEffect data fetching out of my Next.js 16 app and replaced it with Server Components and Server Actions. Here is what broke and what got better.
Tail-Call Optimization Explained: Why Recursion Doesn't Have to Blow Your Stack
Learn how tail-call optimization lets you recurse without stack overflows. Covers TCO in Elixir, Scala, Clojure, and why Java still doesn't support it.
The Axios npm Hack: How North Korea Hijacked 100M Weekly Downloads
On March 31, 2026, Axios was hijacked on npm by North Korean hackers. Here is the full technical breakdown, how to check if you're affected, and how to protect your projects.
You Can Now Pay by Just Saying It. Here Is What Razorpay and NPCI Just Pulled Off
Razorpay and NPCI just launched Agentic Payments on Claude, letting AI complete UPI transactions on your behalf. Here is a breakdown of how it works, why India is the right place for it, and what it means for the future of commerce.
The Future of Security: AI-Driven Anomaly Detection with Spring AI
Move from static rules to dynamic behavioral analysis. Learn how to intercept Spring Security Lifecycle events and feed them into a local LLM or Vector DB to detect account takeover attempts in real-time.
Zero Trust Architecture: Implementing Least Privilege in Spring Boot Microservices
Move beyond perimeter security. Learn how to implement mTLS, JWT propagation, and fine-grained Attribute-Based Access Control (ABAC) using custom AuthorizationManagers in Spring Security 6.
Full-Stack Social Identity: Spring Security 6.x + Next.js 16 + Auth.js
Building a secure "Backend for Frontend" (BFF) architecture using Next.js 16, Auth.js, and Spring Security 6.4 as a stateless OAuth2 Resource Server.
The Component Revolution: Mastering Spring Security 6.x Bean Migration
The definitive guide to migrating from WebSecurityConfigurerAdapter to the SecurityFilterChain bean model. Understand the "why", master the "how", and future-proof your security configuration.
10 Essential Java Libraries to Reduce Boilerplate Code (Beyond Lombok)
Stop writing getters, setters, and mappers. Discover the essential Java libraries like MapStruct, Records, Retrofit, and jOOQ that will cut your codebase in half.
Fixing LazyInitializationException in Spring Boot: The Right Way
The #1 error in JPA explained. Why open-in-view is bad, and how to use JOIN FETCH, @EntityGraph, and DTOs to fix it permanently.
Handling Clock and Timezones Correctly in Java
Why LocalDateTime.now() destroys your tests and how to use java.time.Clock to handle timezones like a pro in production applications.
Integration Testing with TestContainers in Spring Boot: A Practical Handbook
Stop writing brittle tests with H2. Learn how to use Testcontainers to run your integration tests against real Dockerized databases in Spring Boot 3.1+.
Solving Spring Boot CORS Errors Once and For All
The definitive guide to fixing Access-Control-Allow-Origin errors in Spring Boot. Learn the difference between @CrossOrigin, Global Config, and Security Filters.
Goodbye middleware.ts, Hello proxy.ts: The Next.js 16 Migration Guide
Next.js 16 has killed `middleware.ts`. Learn how to migrate to `proxy.ts`, why auth in middleware is now considered unsafe, and how to master the new Node.js-based proxy layer.
How to Implement the Debezium Outbox Pattern in Spring Boot
Production walkthrough of the Debezium outbox pattern in Spring Boot. Worked example with code, Kafka topics, and the dual-write problem solved end to end.
Sanitizer-Lib is Now Live on Maven Central
Great news for Java developers! Sanitizer-Lib, the library that eliminates input sanitization boilerplate, is now officially available on Maven Central. Here is how to add it to your project.
The Day a React Patch Broke the Internet
If you tried to open X (Twitter), Canva, or Discord on December 5th, you likely saw a 500 error. The internet didn't just blink; it stumbled hard. Here is the technical breakdown of the React2Shell outage.
JSON to DTO Converter: Instantly Generate Java Classes from JSON
Free online JSON to DTO converter. Instantly generate production-ready Java Records, Lombok classes, and Jackson-annotated DTOs from any JSON payload.
Google Antigravity: Why I Think It Changes Everything
My personal take on Google Antigravity, the new agentic AI platform, and what it means for the future of our craft.
Java 25 Performance: How Compact Object Headers Save 20% Memory
Let's talk about JEP 519. It's a game-changer in Java 25 that slashes object overhead by 50%, saving you a ton of heap memory.
The One System Design Question That Failed 80% of Candidates in 2025
It sounded simple: "Design a Rate Limiter." But there was a twist that caught almost everyone off guard.
Building a Modern Documentation Generator with Next.js 16
I got tired of setting up docs for every project, so I built a documentation generator that actually makes it fun. Zero config, MDX support, dark mode, search—the whole deal.
Why `1 == 1` is True but `128 == 128` is False in Java — The Integer Caching Trap Explained
Discover the surprising behavior behind Java's Integer caching mechanism and why `==` comparisons can lead to unexpected results.
My Thoughts on Vibe Coding
A personal take on vibe coding—when it works, when it hurts, and how I used it on rabinarayanpatra.com to add dark mode and a blog audio feature.
How I Turned Daily Problem Solving into a DSA Habit (and Stuck with It)
A first-person, friendly walkthrough of how I built a consistent daily DSA problem-solving habit, the routines I use to stay motivated, and the systems that keep me improving without burning out.
Top Java Interview Questions for 2025: Quick Prep Guide
Currently interviewing for Java roles? Get the essential questions and answers I'm seeing in 2025 interviews. Covers Virtual Threads, modern concurrency, memory management, and Spring Boot internals with practical examples.
Mastering Virtual Threads in Java 25: The Complete Guide to Lightweight Concurrency
Discover how Virtual Threads in Java 25 revolutionize concurrent programming. Learn practical implementation strategies, performance optimizations, and real-world use cases that will transform your Java applications.
Modern Java Development: Mastering Java 21+ Features and Spring Boot Best Practices in 2025
Discover the latest Java 21+ features including Virtual Threads, Pattern Matching, and Records. Learn advanced Spring Boot best practices, performance optimizations, and modern architectural patterns that every Java developer should know.
Sanitizer-Lib: The Java Library That Eliminates Input Sanitization Boilerplate Forever
Meet Sanitizer-Lib - a powerful Java library that automatically sanitizes your data with simple annotations. Zero configuration, Spring Boot ready, and enterprise-grade security for modern Java applications.