Hi, I'm Pilcrow

I think I'm best "known" for my work on auth libraries, but I'm interested in anything web dev... well maybe except CSS. I enjoy taking photos, drawing, playing games, traveling, and cooking.

Feel free to message me on Twitter or Discord!

Projects

Lucia

A simple and flexible auth library that works alongside your database.

The Copenhagen Book

A basic guideline on implementing auth for the web.

Oslo

A collection of auth-related utilities.

Arctic

OAuth 2.0 and OIDC clients for major providers.

Auri

Manage package changes and releases without leaving GitHub.

Malta

Generate simple and clean documentation with markdown - written in Go.

Blog

How I would do auth

A quick blog on how I would implement auth for my applications.

Please stop using middleware to protect your routes

Stop overthinking and over-abstracting.

Investigating a major security vulnerability with Clerk's Next.js integration.

Figuring out how a major auth provider fucked up.

Generating random values in TypeScript

Generate cryptographically strong random values with the Web Crypto API.

A beginner's guide to OAuth 2.0

OAuth isn't hard.

The never-ending discussion of cookies vs. local storage

Should you use cookies or local storage for storing credentials?

Next.js, just why?

Next.js has been one of the most frustrating frameworks I've ever worked with.

A look into "GDPR compliant" analytics

What makes something GDPR compliant, and how do you implement analytics without violating it?