vhsdev
Birdcage sits on a VPS and handles auth + reverse proxying. The connection back home runs over WireGuard — the VPS only sees opaque packets. The agent manages its own WireGuard interface, discovers endpoints via STUN, and falls back to relay when direct UDP fails.
Auth uses PBKDF2 with adaptive proof-of-work on brute force, JWT dual-token pattern with sliding session expiry, and WireGuard key rotation on a configurable interval. Single binary, pure Go, no CGO.
Edit: The create account I hadn't thought of for the email enum. Thanks!
Edit 2: Fixed up two schema issues identified and the last mitigated already via call: await passwords.rejectPasswordWithConstantTime(validatedData.password)
Show HN: Minimal NIST/OWASP-compliant auth implementation for Cloudflare Workers
https://github.com/vhscom/private-landing
This is an educational reference implementation showing how to build reasonably secure, standards-compliant authentication from first principles on Cloudflare Workers.Stack: Hono, Turso (libSQL), PBKDF2-SHA384 + normalization + common-password checks, JWT access + refresh tokens with revocation support, HTTP-only SameSite cookies, device tracking.It's deliberately minimal — no OAuth, no...
Speech-to-Text Library in C
Storing graphs in the database: SQL meets social network (2009)
Creating JSON Extracts in Supabase
Activate and Use Supabase GraphQL
Auth for Web3 Onboarding
Svelte is better than React
Russia's 3-Step Program to Put the Ruble on a Gold Standard
Will Web3 Ever Go Mainstream?
Simple Hover Animations with Tailwind
Show HN: Chicago Gang History Helm Chart
Fetch Inject – Dynamically Inline Assets into the DOM Using Fetch Injection
Recovering Files from a Kubernetes Persistent Volume
GNUnet 0.16
Floris Keyboard - Gboard
Bromite - Chrome
OsmAnd+ - Google Maps
Editor - Google Keep
My Expenses - Mint
NewPipe - YouTube
LibreSpeed - Ookla Speed Test
Currencies - xCurrency
Diary - DayOne
Password Store - 1Password
Aegis - Authy
WireGuard - All VPNs
Book Reader - Acrobat
Pluvia Weather - Weather