|
19448
|
melOS by @MC | Stardance
|
MC
|
2
|
21.0
|
0
|
[{"ship_num": 1, "ts": "2026-1 [{"ship_num": 1, "ts": "2026-10-31T15:07:33Z", "hours": 11.0, "multiplier": null, "payout": 0, "blessing": "neutral", "text": "I made a WebOS design, with no real theme other than being based on my random quirks and a lot of blue and green (that rhymes). I am proud of the fact that I was able to make something and it forced me to ask myself – what is my actual personality (for reasons this is a joke). All humor aside, while certain things were a challenge and I am glad I had tutorials and helpers along the way (who needs chat-gpt when you have a sister who is a more experienced coder), I am glad that my hours were put into somethings silly that people can mess around with. While there’s not many things you can do, there are many apps, some of which are interactive and some of which are just ways you can glimpse into who I am. I hope that whoever can come across this can enjoy. Technically I only added two new full features (quotes and canvas) because I ran out of ideas and time and was too much of an overachiever in WebOS 1, but I did my best to add to other sections such as Melbot (it’s been a while so don’t quote me on this one), Thinks and Snippet (although you can tell I abandoned this project at many points). Anywho, I hope you enjoy!", "repo": "https://github.com/mel-cruz/melOS", "demo": "https://mel-cruz.github.io/melOS/"}, {"ship_num": 2, "ts": "2026-06-25T20:51:18Z", "hours": 10.0, "multiplier": null, "payout": 0, "blessing": "neutral", "text": "I made a webOS that essentially shows a lot about myself through the different apps (whether it be my own ideas or random creations). Initially it was challenging to figure out what i wanted to do without being too similar to the tutorial. Also I didn’t really know what I was doing. Over time I found my groove and made melOS the mildly personal thing that it is.", "repo": "https://github.com/mel-cruz/melOS", "demo": "https://mel-cruz.github.io/melOS/"}]...
|
[{"post_id": 85585, "ts": "202 [{"post_id": 85585, "ts": "2026-10-31T14:59:59Z", "hours": 0.2858, "text": "Less so debugging, more so me doing stuff in Snippets because certain formatting things were bothering me. I also added another snippet because that’s what it’s for. I believe I’m finally going to ship"}, {"post_id": 85560, "ts": "2026-10-31T14:27:44Z", "hours": 4.2875, "text": "Hi I’ve been busy with other things and can’t believe I forgot about this until the very last minute but I don’t know that I’ve met the requirements fully for webOS but at least I can share the last app i’ve made, a quotes site with random quotes. I think I did other things in those total four hours but I’m afraid it’s been so long that I don’t fully recall. I think I did a lot of debugging."}, {"post_id": 35954, "ts": "2026-07-27T18:49:01Z", "hours": 6.2731, "text": "I haven’t done a devlog in a while, but I’ve started working on the webOS 2 mission. I’ve updated part of the topbar to go to the homepage of my overarching website (I also have a custom domain now). I’ve also mostly completed my first new app, Canvas, which is an open canvas where the user can draw whatever they like. It started with a simple download/clear button and brush tool, but now also has buttons to fill the background and erase."}, {"post_id": 15896, "ts": "2026-06-25T20:46:54Z", "hours": 0.8933, "text": "I added one final app (for now) and finally deployed it with github!"}, {"post_id": 15725, "ts": "2026-06-25T16:20:46Z", "hours": 1.0525, "text": "I rediscovered (and edited for colors) a snake clone i made a while back and added it in as another app. I also implemented custom hidden messages that only show up with certain keywords"}, {"post_id": 15291, "ts": "2026-06-24T20:41:46Z", "hours": 1.9931, "text": "Kind of gave up on following the tutorial by now. Added two more apps: Melbot, which is a fake AI that responds with a bunch of pre-written sarcastic replies no matter what. And “Thinks”, which is essentially where I can put random questions/thoughts/deep sentences that come to mind (if I choose to)."}, {"post_id": 12824, "ts": "2026-06-21T00:07:17Z", "hours": 1.9814, "text": "Got my first app running. Finally got to declunk my css code. Almost done with part 4 of the tutorial. Never really sure what to share here."}, {"post_id": 12650, "ts": "2026-06-20T17:43:51Z", "hours": 1.54, "text": "finished part 3 of the tutorial. currently struggling to move the styles to css (that’s what you get for choosing to use a million different fonts). Working behind the scenes on some other artwork to make it more personal"}, {"post_id": 12238, "ts": "2026-06-19T23:54:15Z", "hours": 2.3117, "text": "Realized that I haven’t done one of these yet. I’ve mostly completed up to part 2 of the tutorial. Tried my best to deviate from the tutorial but I’ll make it even more personal once I’ve finished the basics"}]...
|
Title: melOS by @MC | Stardance
Devlogs:
Realized Title: melOS by @MC | Stardance
Devlogs:
Realized that I haven’t done one of these yet. I’ve mostly completed up to part 2 of the tutorial. Tried my best to deviate from the tutorial but I’ll make it even more personal once I’ve finished the basics
finished part 3 of the tutorial. currently struggling to move the styles to css (that’s what you get for choosing to use a million different fonts). Working behind the scenes on some other artwork to make it more personal
Got my first app running. Finally got to declunk my css code. Almost done with part 4 of the tutorial. Never really sure what to share here.
Kind of gave up on following the tutorial by now. Added two more apps: Melbot, which is a fake AI that responds with a bunch of pre-written sarcastic replies no matter what. And “Thinks”, which is essentially where I can put random questions/thoughts/deep sentences that come to mind (if I choose to).
I rediscovered (and edited for colors) a snake clone i made a while back and added it in as another app. I also implemented custom hidden messages that only show up with certain keywords
I added one final app (for now) and finally deployed it with github!
I haven’t done a devlog in a while, but I’ve started working on the webOS 2 mission. I’ve updated part of the topbar to go to the homepage of my overarching website (I also have a custom domain now). I’ve also mostly completed my first new app, Canvas, which is an open canvas where the user can draw whatever they like. It started with a simple download/clear button and brush tool, but now also has buttons to fill the background and erase.
Hi I’ve been busy with other things and can’t believe I forgot about this until the very last minute but I don’t know that I’ve met the requirements fully for webOS but at least I can share the last app i’ve made, a quotes site with random quotes. I think I did other things in those total four hours but I’m afraid it’s been so long that I don’t fully recall. I think I did a lot of debugging.
Less so debugging, more so me doing stuff in Snippets because certain formatting things were bothering me. I also added another snippet because that’s what it’s for. I believe I’m finally going to ship
Ships:
I made a webOS that essentially shows a lot about myself through the different apps (whether it be my own ideas or random creations). Initially it was challenging to figure out what i wanted to do without being too similar to the tutorial. Also I didn’t really know what I was doing. Over time I found my groove and made melOS the mildly personal thing that it is.
I made a WebOS design, with no real theme other than being based on my random quirks and a lot of blue and green (that rhymes). I am proud of the fact that I was able to make something and it forced me to ask myself – what is my actual personality (for reasons this is a joke). All humor aside, while certain things were a challenge and I am glad I had tutorials and helpers along the way (who needs chat-gpt when you have a sister who is a more experienced coder), I am glad that my hours were put into somethings silly that people can mess around with. While there’s not many things you can do, there are many apps, some of which are interactive and some of which are just ways you can glimpse into who I am. I hope that whoever can come across this can enjoy. Technically I only added two new full features (quotes and canvas) because I ran out of ideas and time and was too much of an overachiever in WebOS 1, but I did my best to add to other sections such as Melbot (it’s been a while so don’t quote me on this one), Thinks and Snippet (although you can tell I abandoned this project at many points). Anywho, I hope you enjoy!...
|
1793616468.7907734
|
1793702868.7907734
|
|
53655
|
meldr by @ranveergill | Stardance
|
ranveergill
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: meldr by @ranveergill | Stardance
|
1793498118.2798283
|
1794102918.2798283
|
|
4723
|
melodyguesser by @divya | Stardance
|
divya
|
0
|
2.07
|
0
|
[]
|
[{"post_id": 820, "ts": "2026- [{"post_id": 820, "ts": "2026-06-02T14:36:51Z", "hours": 0.3422, "text": "messed up the project working on bringing back the updates"}, {"post_id": 772, "ts": "2026-06-02T13:10:09Z", "hours": 0.4181, "text": "working on the frontend part the ui looks pretty much dull iam still polishing and making changes iam thinking of deploying backend some other website the current website has low latency and will work on implementing feautres once frontend part finishes"}, {"post_id": 760, "ts": "2026-06-02T12:21:21Z", "hours": 1.3125, "text": "astro glide , it is an app where we can explore different songs from corners of the world you have to guess the name of the song ,a piece of an audio clipwhich will be played in real time we are also implementing such as artificial intelligent models in to this coming soon…"}]...
|
Title: melodyguesser by @divya | Stardance
Devlog Title: melodyguesser by @divya | Stardance
Devlogs:
astro glide , it is an app where we can explore different songs from corners of the world you have to guess the name of the song ,a piece of an audio clipwhich will be played in real time we are also implementing such as artificial intelligent models in to this coming soon…
working on the frontend part the ui looks pretty much dull iam still polishing and making changes iam thinking of deploying backend some other website the current website has low latency and will work on implementing feautres once frontend part finishes
messed up the project working on bringing back the updates...
|
1793166808.4515643
|
1793771608.4515643
|
|
19056
|
melon by @nox | Stardance
|
nox
|
0
|
4.04
|
0
|
[]
|
[{"post_id": 30612, "ts": "202 [{"post_id": 30612, "ts": "2026-07-18T10:16:36Z", "hours": 4.0428, "text": "wired up the core tracking flow end-to-end: the database layer now initializes cleanly and stores everything it needs for topics, captured signals, and custom sources, with safeguards like foreign keys, URL dedupe, and soft-deactivation of topics so history is preserved on top of that, i built the scraper to pull rss items (defaulting to google news or custom feeds), parse headlines safely, skip broken feeds without killing the run, filter by keyword when needed, and deduplicate links both within a scrape batch and against previously seen urls. overall, the foundation is now in place for user-specific topic tracking with reliable ingest and persistence."}]...
|
Title: melon by @nox | Stardance
Devlogs:
wired u Title: melon by @nox | Stardance
Devlogs:
wired up the core tracking flow end-to-end: the database layer now initializes cleanly and stores everything it needs for topics, captured signals, and custom sources, with safeguards like foreign keys, URL dedupe, and soft-deactivation of topics so history is preserved on top of that, i built the scraper to pull rss items (defaulting to google news or custom feeds), parse headlines safely, skip broken feeds without killing the run, filter by keyword when needed, and deduplicate links both within a scrape batch and against previously seen urls. overall, the foundation is now in place for user-specific topic tracking with reliable ingest and persistence....
|
1793368146.2829924
|
1793972946.2829924
|
|
41740
|
meloop - watch your video multiply by @sahilaw | S meloop - watch your video multiply by @sahilaw | Stardance...
|
sahilaw
|
1
|
9.0
|
130
|
[{"ship_num": 1, "ts": "2026-0 [{"ship_num": 1, "ts": "2026-08-09T17:37:08Z", "hours": 9.0, "multiplier": 14.55, "payout": 130, "blessing": "neutral", "text": "I spent the last few days on meloop, a tool that turns any short clip into an endlessly multiplying grid. Everything runs on your device, nothing gets uploaded. The hardest part was frame extraction. Sampling too slowly made the loops choppy, sampling too fast made the browser lag. Settling on 24 fps and a 60-second limit fixed most of it. I’m happiest with how the grid grows while staying perfectly in sync with the original audio. Also added a recent-clips list with IndexedDB so you can replay videos without uploading them again. To try it just go to meloop.vercel.app, drop any short video under 60 seconds, and watch it multiply. There’s a demo button if you don’t feel like uploading anything.", "repo": "https://github.com/sahilaw22/meloop", "demo": "https://meloop.vercel.app/"}]...
|
[{"post_id": 44105, "ts": "202 [{"post_id": 44105, "ts": "2026-08-09T17:28:27Z", "hours": 2.0944, "text": "second devlog I built a thing that takes a short video and turns it into a growing grid of the same clip looping forever. One tile, then four, then nine, and so on until the whole screen is just the same meme repeating itself. The idea The whole point was that nothing leaves the browser. No uploads, no servers. You drop a video, the browser rips the frames out with canvas, and then it just starts multiplying them. Audio stays from the original file so it doesn’t sound like garbage. Frame extraction Getting this part right took longer than I expected. At first I was sampling too slowly and the loops looked choppy. Then I was sampling too fast and the browser would choke on longer clips. Settled on: 24 fps Max video length: 60 seconds Max file size: 15 MB Frames scaled down to 480px Still not perfect, but it works for most meme-length clips. The multiplying grid This was the fun part. I started with a simple canvas renderer that just kept adding more of the same frame. Watching a single sad cat video slowly take over the entire screen is weirdly satisfying. Had to add a couple of limits though: Hard cap at 1024 tiles Auto-pause every couple of minutes Otherwise Chrome starts melting. Extra stuff Recent clips saved with IndexedDB so you can re-run the last few videos without uploading again Drag and drop + a demo video button Basic play/pause/mute controls Try it Live version is up at meloop.vercel.app What’s still rough Performance on older phones isn’t great The pause modal feels a bit abrupt Some longer clips still struggle during frame extraction The core idea works though, and everything stays private, which was the main goal."}, {"post_id": 37338, "ts": "2026-07-30T00:03:19Z", "hours": 6.8697, "text": "Hey everyone! this is my first devlog Here what i did today: I spent some time polishing meloop today. i refined the ui, improved animations, and optimized the frame processing pipeline to make everything feel smoother. the biggest goal is still the same: keeping all video processing fast, private, and entirely inside the browser without relying on servers or uploads. it’s starting to feel much more like a finished product with every iteration. Check out live demo here! https://meloop.vercel.app/"}]...
|
Title: meloop - watch your video multiply by @sahi Title: meloop - watch your video multiply by @sahilaw | Stardance
Devlogs:
Hey everyone! this is my first devlog Here what i did today: I spent some time polishing meloop today. i refined the ui, improved animations, and optimized the frame processing pipeline to make everything feel smoother. the biggest goal is still the same: keeping all video processing fast, private, and entirely inside the browser without relying on servers or uploads. it’s starting to feel much more like a finished product with every iteration. Check out live demo here! https://meloop.vercel.app/
second devlog I built a thing that takes a short video and turns it into a growing grid of the same clip looping forever. One tile, then four, then nine, and so on until the whole screen is just the same meme repeating itself. The idea The whole point was that nothing leaves the browser. No uploads, no servers. You drop a video, the browser rips the frames out with canvas, and then it just starts multiplying them. Audio stays from the original file so it doesn’t sound like garbage. Frame extraction Getting this part right took longer than I expected. At first I was sampling too slowly and the loops looked choppy. Then I was sampling too fast and the browser would choke on longer clips. Settled on: 24 fps Max video length: 60 seconds Max file size: 15 MB Frames scaled down to 480px Still not perfect, but it works for most meme-length clips. The multiplying grid This was the fun part. I started with a simple canvas renderer that just kept adding more of the same frame. Watching a single sad cat video slowly take over the entire screen is weirdly satisfying. Had to add a couple of limits though: Hard cap at 1024 tiles Auto-pause every couple of minutes Otherwise Chrome starts melting. Extra stuff Recent clips saved with IndexedDB so you can re-run the last few videos without uploading again Drag and drop + a demo video button Basic play/pause/mute controls Try it Live version is up at meloop.vercel.app What’s still rough Performance on older phones isn’t great The pause modal feels a bit abrupt Some longer clips still struggle during frame extraction The core idea works though, and everything stays private, which was the main goal.
Ships:
I spent the last few days on meloop, a tool that turns any short clip into an endlessly multiplying grid. Everything runs on your device, nothing gets uploaded. The hardest part was frame extraction. Sampling too slowly made the loops choppy, sampling too fast made the browser lag. Settling on 24 fps and a 60-second limit fixed most of it. I’m happiest with how the grid grows while staying perfectly in sync with the original audio. Also added a recent-clips list with IndexedDB so you can replay videos without uploading them again. To try it just go to meloop.vercel.app, drop any short video under 60 seconds, and watch it multiply. There’s a demo button if you don’t feel like uploading anything....
|
1793569933.4075592
|
1793656333.4075592
|
|
59268
|
meme clock by @CamoKid | Stardance
|
CamoKid
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: meme clock by @CamoKid | Stardance
|
1793544465.5632925
|
1794149265.5632925
|
|
35885
|
meme web by @chini | Stardance
|
chini
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: meme web by @chini | Stardance
|
1793238754.7786968
|
1793843554.7786968
|
|
22956
|
meme website by @AbhiGetsZapped | Stardance
|
AbhiGetsZapped
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: meme website by @AbhiGetsZapped | Stardance
|
1793227994.864335
|
1793832794.864335
|
|
66228
|
memorizor by @baibhavrajacharya | Stardance
|
baibhavrajacharya
|
0
|
1.08
|
0
|
[]
|
[{"post_id": 74365, "ts": "202 [{"post_id": 74365, "ts": "2026-09-27T07:46:18Z", "hours": 1.0767, "text": "memorizor"}]...
|
Title: memorizor by @baibhavrajacharya | Stardance Title: memorizor by @baibhavrajacharya | Stardance
Devlogs:
memorizor...
|
1793094889.5507188
|
1793699689.5507188
|
|
66229
|
memorizor by @baibhavrajacharya | Stardance
|
baibhavrajacharya
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: memorizor by @baibhavrajacharya | Stardance
|
1793094891.5848565
|
1793699691.5848565
|
|
49623
|
memory Matrix by @Blumenkohl | Stardance
|
Blumenkohl
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: memory Matrix by @Blumenkohl | Stardance
|
1793296152.0077338
|
1793900952.0077338
|
|
18279
|
memory saver/page replacement model by @charish | memory saver/page replacement model by @charish | Stardance...
|
charish
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: memory saver/page replacement model by @cha Title: memory saver/page replacement model by @charish | Stardance...
|
1793440366.0006766
|
1794045166.0006766
|
|
53163
|
memory-game by @Siddhant08 | Stardance
|
Siddhant08
|
1
|
2.0
|
2
|
[{"ship_num": 1, "ts": "2026-0 [{"ship_num": 1, "ts": "2026-08-30T14:43:23Z", "hours": 2.0, "multiplier": 1.08, "payout": 2, "blessing": "neutral", "text": "I made a Memory game it a game where there is 16 card and u have to find the same two card matching and then u will match all tbe card it will shuffle on it own. The challenge of this project was the js code and I made many error. Ya that it if u want to shuffle mid game u can just refresh the page and the shuffle is random", "repo": "https://github.com/siddhant08-lol/game", "demo": "https://siddhant08-lol.github.io/game/"}]...
|
[{"post_id": 57939, "ts": "202 [{"post_id": 57939, "ts": "2026-08-30T08:43:58Z", "hours": 0.7475, "text": "i just added the rotate animation on the card it looking sooo fire and fixed so many bugged on the games and also added the shake animation and shuffle and i want to post another devlog but the system glitch i coded for 1 hr but I say I have only 12m I couldn’t i finished the work hope u guys like it"}, {"post_id": 52844, "ts": "2026-08-23T06:17:52Z", "hours": 1.4972, "text": "i am working on a memory game where there are 16 card and two card have same image and u have to match them all this project was made for other hackclub even but i didnt complete it so i have made some part of it"}]...
|
Title: memory-game by @Siddhant08 | Stardance
Dev Title: memory-game by @Siddhant08 | Stardance
Devlogs:
i am working on a memory game where there are 16 card and two card have same image and u have to match them all this project was made for other hackclub even but i didnt complete it so i have made some part of it
i just added the rotate animation on the card it looking sooo fire and fixed so many bugged on the games and also added the shake animation and shuffle and i want to post another devlog but the system glitch i coded for 1 hr but I say I have only 12m I couldn’t i finished the work hope u guys like it
Ships:
I made a Memory game it a game where there is 16 card and u have to find the same two card matching and then u will match all tbe card it will shuffle on it own. The challenge of this project was the js code and I made many error. Ya that it if u want to shuffle mid game u can just refresh the page and the shuffle is random...
|
1793612859.811275
|
1793699259.811275
|
|
2045
|
memoryos by @ram | Stardance
|
ram
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: memoryos by @ram | Stardance
|
1793393538.245284
|
1793998338.245284
|
|
26687
|
mena by @srivamsirajesh | Stardance
|
srivamsirajesh
|
0
|
1.14
|
0
|
[]
|
[{"post_id": 17626, "ts": "202 [{"post_id": 17626, "ts": "2026-06-28T14:34:15Z", "hours": 0.6603, "text": "Just added a Dot background canvas"}, {"post_id": 16664, "ts": "2026-06-27T02:55:29Z", "hours": 0.4747, "text": "Hi, I just finished the turborepo and react flow setup"}]...
|
Title: mena by @srivamsirajesh | Stardance
Devlog Title: mena by @srivamsirajesh | Stardance
Devlogs:
Hi, I just finished the turborepo and react flow setup
Just added a Dot background canvas...
|
1793324847.5044806
|
1793929647.5044806
|
|
25608
|
mental wellbeing app by @aadityakumarsah | Stardan mental wellbeing app by @aadityakumarsah | Stardance...
|
aadityakumarsah
|
0
|
13.0
|
0
|
[]
|
[{"post_id": 42449, "ts": "202 [{"post_id": 42449, "ts": "2026-08-07T05:21:04Z", "hours": 13.0, "text": "building cloud agent"}]...
|
Title: mental wellbeing app by @aadityakumarsah | Title: mental wellbeing app by @aadityakumarsah | Stardance
Devlogs:
building cloud agent...
|
1792950620.583777
|
1793814620.583777
|
|
16765
|
mental-health check website by @Cass | Stardance
|
Cass
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: mental-health check website by @Cass | Star Title: mental-health check website by @Cass | Stardance...
|
1793508694.2669737
|
1794113494.2669737
|
|
42079
|
mentra by @Roshe | Stardance
|
Roshe
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: mentra by @Roshe | Stardance
|
1793163033.4862025
|
1793767833.4862025
|
|
836
|
meow auth by @moon | Stardance
|
moon
|
0
|
146.34
|
0
|
[]
|
[{"post_id": 85260, "ts": "202 [{"post_id": 85260, "ts": "2026-10-31T01:07:35Z", "hours": 6.8317, "text": "oh hi again, i guess my turbo mode is half engaged. i killed the bitflags. YES, the mr “scope” bitflags for the oauth2.1 that would make me recompile the whole backend jsut to add a new scope. like, imagine wanting “boots” to exist and having to type… WITH MY KEYBOARD AND RECOMPILE!? ew. NO MORE! now the scopes live in the settings.toml and get registered on startup. Just push shome keys in the settings, restart and boomby boom new usable scope. I will miss the recompiles… (i will not :]) RIGHT! My beautiful scope registry just stores the identifier (the name, fancy name because.. yes) of the scope with its scope definition. What’s the scope definition? … it already says it in the name, its the definition of the scope that includes, again, the identifier, the description to show in consent pages or when managing an application, the allowed application ids for when you want one scope to only be usable by specific applications because you like controlling everything, the allowed client type (first party or third party) and the required user flags which is like “is this user even allowed to BE OFFERED this scope?. Scopes are obviously stored now as a text field in the db, parsed like civilized birds with identifiers converted to lowercase, spaces made into “_” aaaand everything else that isnt ascii just gets thrown out. (for example, “MOOOOON BEEPER” -> “mooooon_beeper”). and course you can ask what youre allowed to use. just ask mr meow meow (meow auth 2) server “hey server, here’s my app, what scopes can i pick?” aand it throws you the scopes you can use filtered by your own user flags, the application’s type and the allowlist. You can also just say “hey servah, what scopes can i use independant of my app (what global scopes you have)?” to get the global scopes. plus as a little plus plus, now the settings docs are able to push comments on optional types (ahem, the additional oauth scopes). anyways, SCOPES are configurable, additional oauth scopes do have docs or else you wont even know how the heck you can add them AND you dont need anymore to recompile to add a new scope which is nice in the end. i need to keep uhm clanking my clawsw into the keyboard to finish thing and deploy it. SHALL YOU SEE the most beautiful screenshots of my beautiful doc comment and the handler handling the simplest thing (giving the scope name and descirption, ah so beautiful):"}, {"post_id": 83532, "ts": "2026-10-28T03:34:19Z", "hours": 10.235, "text": "ooh this is really bad. i have to engage turbo mode again… oh noes OH NO. Wasted big time making the oauth consent and own apps management frontend, fixing stuff past me got wrong or didn’t implement because i was lazy. i am still lazy. i also added a tiny amount of ui legos and fixed a stupid db brain logic error. Right, we gotta move as my devlogs, journals, texts whatever this is, are very very long. noone will read them. they will hate it. I WILL BURN MOON TO A CRISP GODDAMIT. My beautiful backend got a really thin coat of fixes, including a stupid error ive made. The error came from making a db constraint so a user could authorize an app only once. OKAY, but what happened? Only one user could ever authorize an app, because past me left unique constraints on the user’s id and oauth app’s id in both pending and actual authorizations. Basically i forgot to delete the single unique constraints (“int meow unique”, unique is the constraint!) while the tuple (its the “THIS COMBINATION OF THINGS MUST BE UNIQUE”, not each individual field like a normal “int meow unique”). you don’t know my confusion searching why i couldnt authorize the same app from another user lol.. i keep repeating it but GOD DAMMIT PAST ME i hope i become uhm… let’s see… a space birb hotdog nom nom with ONLY ketchup. thanks. Ah, right CORs. ohohoho, cors. I swapped from “oauth debugger” to “oauth playground” because I.. forgot the word debugger and stumbled upon mr. oauthplayground(.io)… I DIDNT KNOW THERE WAS A BETTER THING THAN THE OAUTH DEBUGGER I USED. THIS NEW THINGY thing is a million times better AND can even test OIDC and fetch the “.well-known” oauth metadata endpoint for both modes (oauth 2.1 and oidc). good stuff. But ofc, as always, here comes the mr. cors shinanigans. You should know that I made ALL my routes under “/v1/*” allow requests (via cors) from my frontend ONLY. Bad decision, as oauth clients need routes too, like.. i dont know.. the token endpoint that LITERALLY lets an app access whatever it asked for?… look at my paws or hands or whatever, what would be the best way to fix this? correct you deserve an star with a little uhm feather, separating the oauth part of my server into paths that the frontend will only use and paths that others will use (so no cors [heh tldr lite]). The paths the frontend touches still have cors… it makes me feel safe. also, because of the frontend cors, i couldnt redirect from the frontend consent page to the client’s backend because it was outside of the frontend origin. i had to workaorund it with a html form because I ABSOLUTELYTLITNINTATITONAIIONY REFUSED to add an entire json struct for a simple goofy response with one field named “redirect_to”. FINNALY, the oauth frontend part finally exists!! the consent page loads the pending flow (see stupid screenshot), shows the app and the scopes in human words (minus openid, which i hide because its literally useless for the user). Then you have the typical list of your own apps to manage (see screenshot), with a create button (yes, its a requirement). And lastly the authorized apps HAS NOW real data too with the app name, boom, last used date, boomy and human readable scopes… its very ugly as i really DONT KNOW HOW TO make it stylish hahaha. also NEW legos for the frontend were born out of my hands for my fun, say hi to mr checkbox and the checkbox box (its a box that has a checkbox :]) plus did some cleanup on the button square style and separated the mute style. hiii guys. anyways, this is it. i have to enable my turbo mode. i must enable or all of this was for nothing AND I WANT MY PRIZZE (even though this is clearance week… AWW MAN WHY DID I PROCASTINATE THIS HARD) >:( OR ELSE me angy with wall as always. ah, the time has come to greet you to my shitty screenshots, including one of my badly stupid drawings depicting me saying that the authorized apps collapsible is ugly:"}, {"post_id": 76283, "ts": "2026-10-03T02:33:15Z", "hours": 10.1333, "text": "pew pew cabosh, wawah space birb is very sleepy. BREAKING NEWS, i added and changed a lot of things so i could make a delicious soup of changes that changed my old changed code that i yes. minimal frontend work called making the passkey section button go crazy with colors, authenticator icon (just search “aaguid explorer”, its not crazy work) and having a dialog telling “hi do you want to rename this, no? okay”. I also have collapsibles that hide info from your lil nonfluffy face when its useless. Now my crappy server knows from where you are connecting (who would have known that a server could know that) and where you live (oh no [its approximated from your ip]). THe latter only works when the instance is proxied under cloudflare (it even gets mad if a request doesnt have the headers it wants when you have enabled the “under cloudflare” mode). the audit log single method to do everything™ has been swapped with a builder (i love this), AND its info now includes that same ip and location (actor related [who did it]). all fields are now obligatory for… audit log purposes, because before i just pushed null on the db for things i didnt want to show the user MAKING a pretty stinker audit log that does not show who did what. i really dont know whata past me thought, because you can keep everything on the db and just show what you want to the user. idk, past me thinking in uhm not portals (yes). okay, more slurry of things. mah beautiful fix so the JWKS (signing keys used to… sign a jwt! [important for OpenID]) update when the database JWKS changed, spammed the hell out of the db and log as it polled instead of waiting for the db (or an instance) to say “I UPDATED IT GUYSS!1”!1”. This comes from the instances cache’ing JWKS instead of saying “could you repeat that” to the db (too many requests = blue elephant cry and explosions), so they need to know when the db changes or THEY WILL BE out of sync!! mr past me also thought that it was a good idea to store the oauth token code (used to get an access token) in plaintext in the muffing db, SMTH YOU SHOULDNT AT ALL DO. now its just hashed via hmac just like everything else. man i am GOOOD at this job of so called programming, having to go back to edit a thing i called done AND then HAVINGTO edit and edit and edit. this is so fun that I WILL BURST into FLAMES because of how stoopid i am meanwhile, you also have me deserving to be cooked with rice because I made a condition in the oauth token exchange that when SOMEONE somehow miss types or gets access to the oauth token code but has the wrong client_id, the temporary code gets deleted… and you know what i forgot? i forgot to commit the changes to the db, so the code never was deleted lol. i love these kind of stupid goofy pain errors that arent even errors. AALSO I reprettyfied the oauth helpers because after working on them a long time ago, i didnt know what were they doing and it wasnt fun nor funny >:( [i was mad {i am still mad, with that space birb… i want to sentence past moon to sad corner jail for 12 seconds}]. NOW teeny tiny additions!“1 the ratelimiter now exposes a “Retry-After” per a hacker news old moldy article i found, plus exposes its headers on cors. the audit log now does its job even in more parts! now it also tracks the totp recovery code usage [i frankly forgot about it :(].Changing your email or name now requires sudo minus the name on register. AND the app startup has now a beautiful banner saying “meow auth” in cursive. its pretty :3, makes it stylishinning. I also moved and added to the service manager (the watcher) a way to have service names and to launch services from inside of it (for some reason i used a method that was outof place for ages lol). oh no my time has come nnonono, i give you permission to see my trashy work in screenshot format (so modern)… yet i shall push towards completion of this meowing meow meow authing meow auth server:"}, {"post_id": 65650, "ts": "2026-09-10T22:39:28Z", "hours": 11.2656, "text": "hi hello hiiii, stupid space birb back from long bed sleep break. CATCHING UP, i have swapped to resident passkeys, fixed jwk refresh feature not working, beautified toml settings, added 2fa replay protection and audit log beautification. alright.. prepare for a long boring devlog as always. I finally swapped to resident passkeys after thinking about it for days (hours)! That means.. NO MORE user enumeration problemo with passkeys, yippie. it wasnt really a pain in the feathered buttocks, like it was just enabling a crate flag and boomy boom (and it even works on the frontend!). also, i patched with scotch tape a stupid buggy bug about the email templates, becuase I used a lazylock to store the email templater engine stuffy, when SOME random goofy template or data was wrong for whatever reason, it would poison the lazylock and the next time it was used it would just say “oh noes, i am broken, poisoned my childs. GO HECK YOUR SELF”… i just fixed the template part by checking if tera likes them in the global state creation. i love scotch tape, it smells great. while doing that, i finally addressed the beautiful jwks not updating on all instances because in MY JOB QUEUE only one running server instance can eat the job. that means, if you have 2 instances running, the one that is the unfortunate one that didnt eat the job will have stale jwks until the next time it is restarted. fixed it with some beautiful blue elephant database screaming “HEY GUYS, THE JWKS HAVE BEEN UPDATED” and the other instances will be like “oh, okay, i will update my beautiful jwks now”. finally, 2fa, or as i like to call it, TOTP, has been taken cared like a baby and then thrown again to the battle field after giving it the power up of replay protection. That means, if you use a code, it will be marked as used and you cant use it again (this only works with valid codes). makes you wait more smh. THE SETTINGS got a layer of microscopic makeup because i was like “man, these setting name are weired? what if the settings file had comments to know what the heck is this beautiful knob named ‘do_not_touch_this’”. yes i did that. it was a big red booty pain as i had rerereremember how to do proc_macros and how the heck did i even update the toml files with new entries without making them implode with gibrish. AND WE ALL KNOW NOW that ‘do_not_touch_this’ is a setting that if you set it to true, it will make this space birb implode in flames and become dust (yes, like a real firework going CHIRPAAAAAAAAAAAH pop ). and the final thing given some body work spray was the audit log. no more caveman moonbeeper style ‘log’ method with a thousand things. now we have the SAME thing but as a builder with a ‘save’ method. it just makes the code easier to read and understand. also, the audit log now has a “what resource¿” and “what ip?” and i removed the audit entry making from inside the auth helpers to outside. it was just an inconvenient place to put it, i dont evne know why would moonbeeper put it there… oh right i am moonbeeper. I DID IT BECAUSE it was a great place in those times. alright, HERE’s your typical bad screenshots that are trashign and god i am sleepy:"}, {"post_id": 53541, "ts": "2026-08-24T04:13:41Z", "hours": 9.2344, "text": "hi hello this is space bird. i have eaten 9h hours of real world time in just making the dialog component. I mean, IT WAS for making the 2FA prompts for when you wanted to enable it or disable and bleh bluh.. atleast it does look great… and i still need to add icons. the prompt is just the typical 2fa enable that gives you a qr or the 2fa secret if you cant scan the qr. The dialog component was pretty much made in nothing, in air time (free :D). the thing that took a bit was just the styling BUT WAHT did take a BIG LOOOT of time was just making the 2FA dialogs. lik gha damn hecking “2FA prompt” and “beep boop enabling dialogs”.. why?! becuase they are PACKED like a lasagna with forms, tanstack fetching, dialog steps and other stupid stuff to make it atleast not confusing for the user to navigate with tree sized buttons that dont work (becuase you are on the wrong step!!!!1 or already did everything lol). i mean, besides that custom stuff, it just reuses components like the pin or qr svg and… for now, also uses the spinner icon on the buttons you click to manage 2fa as i couldnt be asked to add real icons for now (leaving them for lasts). next up working work is more dialogs (for the passkey setup [so it isnt just a spinner without any “magic guideance”]), a collapsible comp to wrap the info items to show EVENTUALLY some metadata like, in the session items, browser, ip, what user was that did that thing and etc. Its just so i dont balloon the “info items” BECaUSE they are supposed to be some kind of “quick info”. broom brroom, i love wasting time on these stupid things (and wiring them!) >:3. LEAVING that tiny goofy work that apparently took hours to do. I am thinking and WILL be doing a beautiful swap into using resident passkeys (the ones that dont require me to know the user’s email in advance). yes, i know i said before that i dont wanted and ew ew resident. but man, its just easier for the end user to click a magical button to login directly. AND AND this even protects me from someone slapping the meowbackend with the email fish to see who is registered (with a passkey) by checking if the user’s email makes the selector appear. still, some part of me still thinks this is really bad idea but i want to do it tho… what could go wrong hah! i might aswell go to the cooking pot already and make some uhh chicken soup made of space birb. that’s it, i still feel like i havent done anything. Here’s your beautiful video of showing the beautiful dialog going “hi” “goodbye” (the video shows me enabling 2fa, viewing recovery codes and disabling it [with a recovery code]):"}, {"post_id": 47860, "ts": "2026-08-16T02:59:32Z", "hours": 10.5872, "text": "would you look at that, 10h… i love wasting time. Now THIS thing fetches some bits of data like the audit log, my passkeys, adding those and even modifying the username (you are forced to do it)! BUT big buty, i had to add the mr /signup/complete where you set your prefered username, like moon (its a me!), or else the backend will straight up refuse anything you want to do. AFTER changing it, you can do everything else a normal user can [by Default the username is just the user’s email AND THAT IS NOT PRETTY AT ALL >:(] FIRST OF all i grabbed my magic cup for tea and made the audit log page (it does not even have anything special)! .. oh right, for that i needed to know how the heck you even send requests with tanstack. so uhh,, blah bleh bluh wawa BOOM i now know how to call a method and get my data back AAnd even make infinite fetchers (IT kinda hates my way of giving data [its wrapped in {3} onion layers {request.data.data.data}, the ones that make you cry a bit]). i also synced my auth state with the tanstack client so it doesnt do two trips every time. okay now. TO make the audit log thingy, i did some beautiful matching so the type, creation and guy who did the action (probably the user) are actually human readable with a limit of 8 items (or else the /me page would be as long as this project’s crappy devlogs). When there’s more, a beautiful “view more” button appears (separate page). For this, so called “view more” page, i used the infinite queries. while at first i just puuushed the data into the dom with the #each (svelte thingy), chrome do be VERY very mad when there’s a lot of entries in there (The audit log, because it logs actions in your account, can get very huge. Because actions like the baddie Session action logs each time you log in or log out), SOO i did what someone whose browser is eating more than 10gb does, using a virtual list to render the it! (IT only renders items when they are visible, hidding [removing from the dom] non visible ones. this fixes the “OH gosh THOSE 200 things THAT I CANT EVEN SEE, ARE EATING MY precious ram”). OHh and you can press ESC to leave the page because i made a cool component that lets me plug in a callback for specific keyboard events :D. SECOND, the passkey stuff. yeah, pretty easy thanks to libraries like SimpleWebAuthn that do the hard work of telling the browser “hey, authenticate this guy please” or “hiya, registrate this passkey please”. its just querying what passkys you have to know… hwat passkeys you have and that’s it. BUT sadly, an actually sadly, my passkeys are non resident (I cant have a simple button to just login, I need you email before i can use the passkey). Thaaat means I havea teeny big tiny small user enumaration problemo becuase the backend can reveal that an user has a passkey registered and, in turn, we know that user is registered. a bad guy can just atack with “oh noes, your passkey has been stolen. pls give a undecillion of moneys”. third, i had to add the sudo page. It does what you think, reauthenticate to do sensitive operations like adding a passkey. Pretty simple, it redirects directly to an email code if the user does not have a passkey or totp enabled (email code is always enabled), if they have those, it just shows a selection screen. fourth, i had to fix up some stupid things with the api schema of the backend becuase I either forgot to put a body on the responses (like the passkey/webauthn routes) or just fix up a teeeeeny tiny setting thing that wasnt correct (its the webauthn/passkey rp_origin [allowed pages to register/use a passkey} becuase it jsut used the backend url and THAT is not correct). so tahat’s it, shall you see some stupid screenshots and not even a video because i havent even finished everything:"}, {"post_id": 44382, "ts": "2026-08-10T02:59:15Z", "hours": 6.0403, "text": "well hello again. space birb presents you the next devlog. I cleaned up the forms a bit (they are a still bit TOO messy ugly but they do work), REDID the ugly flags class to be a more EEEASIER TO WROK WITH (i dont even know how it worked before lol) and FINALIZED the auth pages! RIGHT right, first frontend. I finally finalized the most basic and empty and everything pages of the frontend! wahoo mee :). these pages practically include the otp one and the 2fa one (+ recovery).. and i just realized that i forgot about the passkey one, great so now it isnt finished (fried space bird thingy). Redid the pin component so it works with my Input form component AND also fixed some weired quicks of the pin component in phones (for some reason, my phone, didnt respect the max lenght of the input. i just sliced the value of the input on my max length lol). And finally, the frontend now has the most precious bit of any… i dont know. i just added the typical dropdown componetn for the avatars (yes, this was important for me). while on the backend, because mr past moon made some weired decisions, the 2FA recovery code generator and giver of the code the state was a messy mess that I frankly dont know if I even tested it, because it accepted wrong codes? i dont even remember if it worked haha in the past BUT now it works as it should and its at least better readable with normal method names (not plainly “recovery” [… what does that mean anyway!?? you would need to look at the code to understand it! and that’s bad]). ah, the typical moment has arrived, the one i always repeat. HERE’s your happily working auth pages for once, plus the “want to retry the email sending?”, the passkey one is still missing but that’s just slapping some paint (and painting my self) and boom (whhile this is practically the same as the past devlog, it just works better than the past devlog lol):"}, {"post_id": 43668, "ts": "2026-08-09T01:58:51Z", "hours": 10.3242, "text": "would you look at that! Finnaly some functional pages with forms, ALmost finalized components… oh they are just the login pages….. and its not even all of the auth pages, just selected ones so the auth flow barely works. BUT, THIS fLuffy (not fluffy) space bird has finalllizated converting (or thinks) the classes i had as global styles into beautiful svelte components with all those stars and happy things. happily, i am longer limited by having evertyhign in global space.. oh right, RIGHT. i wasnt even limited :). AND the coolest compponent of all of them is the spinner one because it spins. The first pages have been plugged into an outlet called SuperForms (not really super, mostly helping to validate)! thanks to that, we now have working forms that post to the backend! with all those classic things, red colors and form validation. but, how I THE unfluffy space bird is pushing envelopes with the form inside of it? by talking to my backend obviously! but not manually (doign every step each time manually), by using a library like the trusty openapi-fetch that eats the openapi schema of the server i used in the past iteration. BUT i trashed it into the.. trash because I was fed up by having to repeat a thousand times the same snippet of code in each form or even page (I could have used a service like class to make it easier tho!). it was swapped by Orval! Orval works with the same openapi schema BUT gives methods! No more repeating the same things, just use the method and boom. and also that openapi-fetch was mad that i used a more recent typescript version. ANND, finally, the auth context was upgraded with a leg made of clay so it can now parse the BITENUM flags of, for example, the user (UserFlags) that tell what is enabled and what is not, if you didnt remember. Its practically a generic class with everything that i considered necessary that must be extended to be able to use it. and that’s it. you may watch the shittiest video ever that just shows that it kinda works with the forms and logging in and that’s it with still mocked things:"}, {"post_id": 36040, "ts": "2026-07-27T21:16:15Z", "hours": 6.8131, "text": "haha 10 days later. no progress just me rambling and going in circles. I am a bad space birb. RIGHT! I just were converting the css stuff into svelte components using the style tag (and the preprocessor duh). That’s actually it, quite literally. No progress at all. Wasted time on, still, falling on the loop of trying to get something that “looks good”, but i dont reall know what i want in reality. ofc i try to get “inspiratainionion” from other websites and try to mix them together to then dislike the result, undo and rinse and repeat (at this point my fur and feather soaked hard on water). YOu may imagine it as thinking that you ahve a finish line when you done even know where it is. i will just try to make the frontend work first without thinking about the design… AND i cant even promise THAT! because i will probbaly spiral into the same loop once again (saying oh this looks bad blah bleh bleh). god i am bad at making frontends or evne design or everything, but thats how people learn haha. it is a lesson that i should learn from now on.. i keep judging my work too harsly but i dont know. frontend is just harder for me. here’s the useless non functional three pages that atleast have something layout:"}, {"post_id": 30020, "ts": "2026-07-17T08:27:04Z", "hours": 1.9356, "text": "in the end i gave up in the design or well… can you even call it “design” when it was ugly even at teh start? yes, i tried my best at making it look “good” in my own eyes but i could not for the love of birds. it was bad anyways, like actually bad. I, to make it easy for my self and be able to copy how other people do it because i am a lazy bastard (stupid space birb that klanks its keyboard for nothing), will be using the typical two columns for each section. One for “what the heck is this section for” and the other for the actual content (wow). man, i hate how the frontend is where i struggle the most when the backend should be where i should have struggled the most, not with this dude. agh. I also hate HOW i thought the layout i wanted initially was the best one and that i look great when in reality it was an aberration that didnt even look good and it really threw to the trash the unused space bruh. it just wasnt for this job, maybe for something else.. idk haha, what I know is that I think it already looks better with the simple sutff ive done lol [that’s sad btw :)]. as you may see int eh screen shooting, the audit log section instead of having a table it uses a… placeholder for a button with the same content it has currently because I frankly i am scared of making tables because of the probable difficulty i will have (because I am already struggling with teh simplest of things!). ALSO, i need to stop making .scss files, compounded into a single css file using @layer and @use , to just use svelte components that use the style tag. it really doesnt change anything, but atleast i wont be doing “class=‘meow’” each time i want something, just using “” is half better lol (doesnt really fix anything, I just want to give use the svelte components). finally, i am planning to use “services”.. they arent really services but more about wrappers around the openapi client. less manual labor for some shitty stuff that i wont need to do anymore. Still, its just a wrapper with nicer method names and namespaces. (also, ill be adding profile pictures. didnt think i would be adding them tho) here’s the typical dumb screenshot of what i think that looks “good” without doing that much work:"}, {"post_id": 28705, "ts": "2026-07-15T03:47:05Z", "hours": 8.9958, "text": "i am ashamed. i am that bad or… well ive gotten to the point of real badness and what some call “skill issue” because I CANT make this hecking frontend. its just too hard, i am just way more slower than before and what i though i was. i hate that i am not usign tailwindcss and isntead I am building my own scss styles IN @layer when i could have been using svelte components with the style tag but ugh bad decisions that can be still reverted i guess. For the layout of the settings, i even tried copying how I did it in the last iteration of this frontend (past server, not named meow auth).. i just did not like it because using a sidebar for this teeny tiny amount of information is wasteful (like this tiny [not really tiny] space birb). Like the content is just the typical name, email, auditlog, 2fa, passkeys, sessions, oauth authorizations and user created oauth apps AND lets not forget about the admin panel. i am practically suffering with mundane crap that anyone can have done in probably 10 minutes by asking mr claude or even chatgpt OR even just copying an already made layout, but here i am suffering trying to make stuff my own way, telling my self that this was the worst decision i’ve made goddamit… at this point i will really become a hotpot space birb soup.. i just need one layout made and then it should be an easy job to then copy and paste to other tabs. then the enxt step is to wire it up the forms and have it communicate to the backend which should be an easy task (i think [… oh god please be easy])… i know this entries of the frontend will make my project go into deflation mode and stuff, and i even broken a promise that ive made my self to not make devlogs that are more than 5h long because of a review someone made of my project when i submitted it unfinished to flavourtown (yes, flavortown) which is sad but it is what is. you cant be perfect, that’s why i have a shit hecking design. i am just bad, a bad space bird i guess. i already rambled too much in this suppossedly simple devlog. here’s your half crap “inspiration” that I used to (quite literally did a C&P of the page) of my past proyect using a sidebar (not what i want with this iteration) and the current state of art of my REALLY REALLY SHITTY curernt state page:"}, {"post_id": 25277, "ts": "2026-07-09T13:32:20Z", "hours": 10.9092, "text": "hi hello. oh, ive been 10 hours doing the same thing!!1 god. So, I was doing the frontend design without using figma and uhh yes. And also removed the ability to use your login to.. login to the app. You just use your email (otp, and passkeys). First, I forgot how to use figma, I only remember some shortcuts. I was going to use it (for frontend and logos) but seeing how struggled to make simple things, I only used it to swap the colors of the logo of MEOW AUTH, hmm yes, very meow. . The frontend stuff… I frankly ALSO do not remember anything.. or well I do now remember some things thanks to me fighting to uncenter a div hah. The stack is practically svelte, as always, client rendered and scss (sassy :o) for the styling. In the start I was just going to use the same styling and structure of my first iteration of this project, beepauth (ew), and after doing all of that I thought “god, this looks pretty bad”, soo I then tried to make it look a bit better WITHOUT starting from zero again. And I did style it a bit better but I didn’t even like it. Like it felt like I hadnt even advanced at all, like if the same shitty fricking backend was the same from the past (probably noone would care because probably uhh noone cares.) [brains a weired and even more mine i guess, wawa]. So, naturally, i did the less sane thing, REDOING EVERYTHING again. Had to watch tutorials to relearn how use sass and picked up also some new css stuff that I wont even use (minus the layers! that pretty cool!!). And from that css stuff I discovered Oklch.. yes i swapped my whole color palette to that using their harmonizer that uses the equivalent of WCAG, APCA (contrast bg to text!). At least the frontend now looks decent (or the first blocks fo the website). sadly the only frcking shitting heckign parts ive made are the login (and register BUT THATS THE SAME). AWIT WAIT WAWA, I also swapped some gears in the BACKEND! I removed the login (username) entirely, now its just demoted to a non unique display name (for openid!). you must be asking why, because I changed it to use the login not long ago. Well, because I don’t have to force a user to give me a username AND their email on signup. Its easier to just give the email. And if you already have an account and hit, without knowing (our typical autopilot mode), the signup page, I can silently make a AuthChallenge for login instead of signup because both handlers return the same result. Then, after registering, I just force you to set a display name (by default its just the email, i could leave it like that but currently I want it to force you set a custom display name for OPENID). By doing that, I practically removed the “vectors” (ooh hackiry stuffiry) for user enumeration [those vectors were the endpoints to see if a login (username) or email was already taken] (I also made so the login endpoint gives you a fake challenge id when the email doesnt exist {This works thanks to having the auth exchange handlers return “invalid code” even if the challenge doesnt even exist}). here’s your screenshot of a login page that looks exactly like very other login page, maybe even shittier (sorry i am bad doing these kinds of things.) [also you have the logo colors, i went with purple because it looks cool and its a cool color] {the “Psst, over here” its just a random greeting, just like the ones i have in the emails} [[sorry for wasting 10 hours doing nothing]]:"}, {"post_id": 23063, "ts": "2026-07-05T20:02:59Z", "hours": 0.3025, "text": "a. hi there mr svelte! I was wondering if I should be drafting first a design in figma but meh. I like to suffer and make bad designs that progress very slowly to look mediocre at best! yay!1!! anyways, ill be using scss as always (i frankly done even remember anything about it lol) and sveltekit. HERE’S YOUR stupid “hello world” from slevetkt (reaaly useful devlog):"}, {"post_id": 22522, "ts": "2026-07-05T01:24:44Z", "hours": 0.3122, "text": "oopsy. shoooort one, sorry. I added the forgotten oauth error StatusCodes and Descriptions. there’s not much to it lol, I just forgot about it. as always, here’s your even uselesser screenshot with code taht you can already see in the guthub:"}, {"post_id": 22514, "ts": "2026-07-05T00:59:48Z", "hours": 1.7131, "text": "right, its a me! the teeny tiny waist sized space birb that is here to tell you that I added the ratelimiter! It works just as i’ve explained in the last entry, it uses the IP of the user to limit the amount of requests via a ticket bucket. THe bucket is stored in memory, as again said before, so if the instance is restarted, goodbye ratelimits. EAch request eats 1 ticket AND the bucket tickets and refill rate can be set via the… middleware. who would have known wow. It always adds the typical “x-ratelimit-limit” bleh bleh bleh with all the info you can like that is useless BUT hey, its there for you. I like making my own stuffies because its cool. THe root has a limit of 500 requests, refilling after 1 second. While the auth routes have a limit of 10 (sudo) and 20 (auth flows) requests, refilling after 1 minute. The other routes are just uhh protected under the umbrella of the root ratelimiter lol, no need for having to add a ratelimiter to every single route (god). that’s it. there’s no more devlog. Now what i gotta start doing is the frontend. I will cry a bit because I am VERY very VEEERY rustified in the typescript department like I never touch it but meh I MUST do a frontend or else this is incomplete… and i will do be crying if i send it off in a incomplete state. THE frontend will be in svelte kit, because its cool and ive already used it in the last iteration and it left me with a good taste in my forked tongue (hahaha, i am space birb) AND thanks that Ive been using from the start utoipa to add an openapi schema, I can use it easily to make requests from the frontend! and i didnt need to suffer adding them after everything was done just like in the past iteration! here’s your useless screenshot showing teh ratelimiter working and the headers and stuffies… god i am a mediocre at best writting long hecking devlogs for nothing:"}, {"post_id": 22325, "ts": "2026-07-04T18:52:19Z", "hours": 1.4481, "text": "wow. that’s a long time doing nothing. I just updated the deps, tera had a change on its templating because it was rewritten from the ground up. pretty cool, now it kinda looks like jsx and at the same time not. I also tried or well… I am thinking about making my own ratelimiter but was like, ugh. I was practically mega blocked on the idea of wanting a ratelimiter that used the IP + UserId. Both are easy but for some goddamn reason I kept going circles and circles and honestly I dont even remember why anymore, like huh!? In the end I will only be doing ratelimits via IP because they are the easiest AND THEY DO NOT NEED TO be stored in the database. yes database, you read it right. IN this version of my backend I wanted to use the least things AAANd the oNly thing required is just the database to make everything. Adding redis would be waste (and waste of ram) for just storing the ratelimiter. Redis would be required if I wanted to run more than 1 instance of my application AND IF i wanted to distribute the info about “oh this guy is grounded, no entering the meow auth realm for 5 minutes” to all other running instances. BUTTT, as you might not see, I dont want to run more than instance nor want to distribute it to more instances if it were the case that I wnted to run more than 1 instance. Soo, I went in circles in my crapppy bird brain because to add ratelimits via the user id I would have to store the info somewhere that wouldnt be erased (like in the in-memmory storing that i will be using) or else the ratelimits would be useless because… THEY WOULD BE ERASED from this whole realm when the instance is restarted (memory goes boom to the void, so does the ratelimiter). That’s why I want to just implement the Ip based one, its the easiest one and the only one that I don’t care about loosing the information about the ratelimits when the instance is restarted. Also, i need to implement it yet lol i was just scrambling my head nuts and bolts hearing them clank while trying to ratchet them. ALSO², i need to redo the email stuff because my brain has came up with a cool design lol but first gotta do the frontend to make it uhh look good before suffering making the email components. I also started to hate the tera zed language extension. its crap. bad crap the worst one. ALSO, here’s your really useless screenshot this time showing code that you can already see on the github page (yay!1):"}, {"post_id": 20456, "ts": "2026-07-02T01:37:49Z", "hours": 5.1653, "text": "hello again, its a me, a random space birb that is here to tell you that I completly forgot about the ratelimiting stuff. BUUT, I added the admin methods and UserFlags to be able to set… flags. not much rodeo this time. had to think how i wanted the audit logs to work for the admin stuff. I first though about just having a bool saying “ah yeah admin” but meh, I think its better to have also an “actor_id”, the who did it user id, and boom. In the user side handlers for the audit log I just return the typical plain response of “yeah this was changed” (not sql joins, cheaper [?]) but in the admin side, I return the actor_id with some other things like the user login of the actor AND the user login of the user that was changed (cause why not!? its jsut another join statement in sql). Works wonderfully and even better now because before I had setup the user audit log to fetch AAAL the entries form the db and pee pee poo poo no, now that i have my paginated stuff, no way! SOO, the admin methods are just the typical ones, see what the user has changed or an admin changed from an user via its audit logs, the oauth applications and authorizations management and that’s it. I will probably also add a way to know globally what the heck is being changed but idk about that, seems a big sql query (that is tiny but very costly in db terms) and I frankly want to avoid that… and even more avoid using redis because i hate it and that SOMEHOW i have better some beautiful organized code vs the first version of this backend where I used the typical DB+redis aaand it was ugly . i hate that. I also added the UserFlags to be able to set flags like “is the user an admin?” or “is this user allowed to manage its oauth applications?” and so on. Pretty cool. BUUT as always, I had to C&P some code (almost all of it) from past handlers to make the admin handlers work lol. I would really want to make a central place to put all the common handler code but meh. IT WORKS! and that’s what matters. THe next things are just making the ratelimiting WHICCHC probably will be only inside the instance the user is reaching and that’s it. I would like to have global ratelimiting using the IP of the user or its account id but that would (i think) require redis… I really need to think about this because someone with a crappy toaster can make explode my poor baby vps. ps. god do I really take that much time doing stuff? god i am slow at coding. i am bad goddamit. that’s it. shallllll you see my shiitty api docs with the admin stuff and admin auditlogs becuase why not:"}, {"post_id": 16949, "ts": "2026-06-27T14:57:54Z", "hours": 2.2208, "text": "hi and welcome to my unreadable journals. I added those oauth authorized applications management handlers that I forgot to add yesterday, like the typical “oh let me see what scopes does this thing use… OH GOD IT CAN SEE MY fur color I MUST revoke it NOW!11”. Then I moved AAAL the handlers that touched ME user data to the.. obvious /me route so its prettier and doesnt pollute the air of the real auth related things. and did some cleanup in the http error department by merging some repeated errors. god this is one of the shorter entries i’ve made i think. next up is doing ratelimting, probably roles or just an admin api and the “hey your account has been locked because of repeated tries to login”. i dont even know what will it take to make tests work god. here’s your shitty screenshot showing my only progress, the oauth management bleh bleh bleh:"}, {"post_id": 16427, "ts": "2026-06-26T18:44:11Z", "hours": 3.4175, "text": "hi, hello i am space birb in the sad corner and i am here to tell you that i added the the typical oauth management handlers that everything has. I also added a generic paginated database thingy to be able to make… pages when there’s more than 20 items (rows). firstly, everything was easy. yes, no rocks not nothing that could set me on fire… minus that I HAD TO MAKE a paginated database thingy. WHY did i make it? idk man, i wanted because my bad coder brain thought that maybe someone could have more than 1 oauth application created (like a thousand) and that’s pretty bad for mr blue elephant database becuase that means eating 1000 rows in one go (and blue elephant doesnt like that, AND EVEN less if my vps has 1vcore and not really that much ram). SO, the best course of action was to make pagination to be able to cut in pieces the data and make it easier to load and handle.. even though the loaded rows are hardcoded (its 20 plus 1). The pagination practically works by seeing if there’s more data after 20 items (that’s why it has a “plus 1”!), if so, we take the LAST item’s id (using a trait to access it, because you can’t really know in what form or what id will be used in any database model) in those same 20 items to set the ‘next’ param. That ‘next’ param is used to.. quite literally say “hi, uh could you give me the next rows after this id pretty please?” and boom works and i didnt set my self on fire but i did ruffle my feathers a bit because of. Ill probably implement it to more places because the only places that use it are the oauth applications and user sessions because i am a bit lazy haha (i mean, its just C&P the current find_many* and use the pagination stuff and caboosh). oh god, i forgot about the oauth consent management. great job me, NOW IT ISNT COMPLETE “everything” great coder i am great big bird brain. My next plans are just to do some general cleanup with the openapi schema, add comments to the code and then start doing the frontend in mr sveltekit.. although i am too rusty in ts land and i will have to learn some stuff again and touch again scss and stuffies and god, i am going to get cooked in the sun and roasted like the space birb i am because of me no longer touching anything javascript. here’s your really useless screenshots showing the INCOMPLETE oauth management handlers and the pagination thingy working:"}, {"post_id": 15504, "ts": "2026-06-25T06:20:57Z", "hours": 1.2603, "text": "I made the User Info handler for the open id stuff. that’s the end of it. It works, wahoo my self yay good job, even though you had pretty much bad scrambled code, you did it hahaha. It practically, as the openid spec says, returns the claims used also on the id_token. Soo, because its sooo close to the id_token, i’ve decided to just eat the that same id_token but spit out a converted version with things I want. I also added the typical OauthManager and RequiresOauth. the latter one not having a param to decide what scopes you want because, whhy would you want that?! its just a one liner and it may change for each hecking endpoint or even the data the endpoint returns. its just over complicating it with wrapped trash. … and about my devlogs, i realized that mine are pretty bad and not interesting like other people’s devlogs. i simply write weird and long ones. but i don’t want to write a simple “I did this, commits, hardness of implementing, whatever” in bullet points like other people do. i dunno it feels flat like this devlog. Here’s you typical SINGLE screenshot showing that the user info works, that’s it:"}, {"post_id": 15052, "ts": "2026-06-24T13:25:06Z", "hours": 6.1178, "text": "oh hi, did not know that you are really reading this. I added the openid stuff! Well not all of it, I still need to do the ‘userinfo’ endpoint but meh, it works as it should. I also added the cool JWK (the secret key [ES256] that is used to sign the JWTs) rotation stuff, which I can say that I tried at first over complicating it to then end up simplifying it because it was A HELL to use like you had to call a thousand hecking things or in one method give a thousand arguments (its an overestimation, probs not real [shy of 5, it wasnt generic, it was attached to the token flow] :3), it was a pain to use and IT EVEN GAVE ME a burn mark. As I said, I just redo’d everything and boom, simplified thigny you just call from the global state and boom, we do be working! The JWKs are rotated every 2 months, and the old one is retired at the same time. After 1 month, the retired one is deleted. So, at any given time, there’s a maximum of 2 keys, the current one and the retired one. The retired one, as the name implies, is not used to sign new tokens but is still valid to verify old token. And all of this is fetched at startup and then via a scheduled job it is updated. AND as you might have (NOT) guessed the JWKs are stored in the database, so if you have multiple instances of mah meow meow server running, they all share the same JWKs and rotate… OH GOD THEY DO NOT ROTATE THEM AT THE SAME TIME GODDAMIT AAAGH.. the intention was there okay? I did that to, in one part, give more use to my job manager and, to let all isntances update at the same time but big brain me did not think that a job is always locked to the instance that picks it up. also the token endpoint now supports using openid and spitting out a ‘id_token’ with the user info (some claims are gatekeept behind the scopes [like ‘profile’ or ‘email’ duh]). that’s it actually, like i started really pulling my hair, fluff, feathers whatever because I was trying to overcomplicate it a lot and i really dunno why. like, for another example, i kept swapping from the ‘jsonwebtokens’ and ‘compact_jwt’ crates because I wanted to use ES256 but didnt want the other because i never used it but then ended up using the latter because it was easier, and then that I wanted to use EC25519 which is apparently not really talked about in the rfcs (that’s why i ended up with ES256! [also supported on compact_jwt]). AH! and also in the job queue, for the JWK rotation, I wanted first to add cron job for that but… why tho, I don’t really need it, I just need a way to NOT run a job until a specific time and then reschedule it inside the same worker. here’s the shitty screenshots showing the oh wow ‘openid configuration’, oh wowie ‘it does output tokens and id_token’, oh thats nice ‘it does give out a valid jwt with valid claims that the programmer didn’t even do themselves because they used a library called compact_jwt’ and wow ‘it does have a job that tries to autorotate if the current key is older than two months’:"}, {"post_id": 13022, "ts": "2026-06-21T09:21:29Z", "hours": 1.6031, "text": "you know? i love debugging my code when the error was the entire time in the db. great job me!!!! I’ve made the token handler. again, as other devlogs, that’s all folks. Stupid me couldnt figure out why client secret was always bad, why the mr code verifier was always bad when it was the same as the stored one aaand why the heck scopes werent showing. i really do love that my code, practically, worked first try (MY CODE >:3). But did NOT love that i am still stupid and forgot that i had a database that works as the house for the data that my app ingests. god i am smart. time to go suffer with openid i guess. i have to touch jwt and stuff, eugh.. i like my opaque tokens more than jwts, because IF you want to revoke one of them you still HAVE TO STORE A LIST OF IDS… that defeats the whole hecking purpose dude, not worth it (or that’s what i think for now, smh i am just a space birb claking at keys). here’s your video that shows that it does work and gives the bearer opaque token and creates the db entry:"}, {"post_id": 12940, "ts": "2026-06-21T05:37:44Z", "hours": 4.6994, "text": "yayy! the first step of making oauth2 alive has been made. I rewrote the tiny part of the authorization handler of the oauth2 flow… there’s not much to it! It did took a while to reunderstand it because of how long I wrote it (2 months ago) and that I wrote it in a rush (and didn’t even make it work). Basically, the same as always, traceback to try to understand what past me wanted to do, to then rework everything (or at least try) to unspaghettify those radiative peaces of code. So, practically it only the authorization method was half done and ugly, it was a big BIG monolithic method that did everything in a way that either past me or current me like at all because it takes a whole lotta things to work (8 to 9 argumentos lol). In the end i just splitted the big MONOLITHIC (thick) method into two of the same kind but with at least clear and defined and bleh jobs. One when the user has already authorized the client and the other when he has never touched it in its life. I also did some qol for my self (or i think i did, probs not because it was already bad and rushed and stuff… i already said it at the start) with the oauth helpers and stuff by also prettifying them and simplying parts that I really don’t know why I added. Like I added mr “OauthResponse” which, as the name implies, makes the oauth response (redirect, plain error, error with redirect) instead of the 3 different methods I had to use to do the same thing, easier is better (and even understandable!). Ah, and i even tried to use strum but nope, it do not cut the job (it tries to cut the wall instead of the thing i want). NOW, sHALl the work continue to make the token making handler and then the OpenID stuff that may be a bit difficult because, with my shitty reading, i think ill have to juggle making jwks and stuffies to server correctly the food for the picky openid. here’s the video that shows, confusingly, that indeed the handler works (It does a “hi, oh you want to authenticate with ‘poop’, let me create a pending authentication. Oh! you accepted the consent, let me delete the pending one and create the actual lasting consent for ‘poop’.). god, i am so bad at coding or whatever the this is:"}, {"post_id": 11753, "ts": "2026-06-19T04:14:50Z", "hours": 2.2278, "text": "AAAH, sorry, did i startle you? I added audit logs, a health handler (a simple “OK YES i am alive ) and a root info thingy that tells you “okay, so my name is this, mmh yes, and this is my version and my build stuffies…). the audit log thing was not really a pain to add. At first i was thinking of using my job queue (because ITS only use is for emails… and i put my sweat and tears to making it pretty to then not being used lol) but.. why tho, like IF you see how was the code before the audit log adavancement (yes, cement) you can se HOW every action runs already a postgresql transaction. So, why not bundle the audit log adding magic into that same transaction? and so i did. Now, we don’t have to track our selves with pencil (i dont like pens) and paper the actions we do, we just let the application do it for us… leaving a paper trail of our desastrous actions. yay… now that i said that, i should add a random chance of also adding another audit log entry that is just a random “hi, i am your audit log talking”. hah that would be funny. btw, strum is not cool. I thought i could use hte EnumString thingy to make it implement automagaicallytationally the Display trait to snake_case but NOPE, it is used backwards. You give it a string and it gives out the enum variant. what a pee pee poo poo dude, imagine having a big monstrous enum and having to implement Display for each variant… just like the monolithic error enum of the http site… ew. to use it you just sprinkle the audit::log() and boom, done. AAAAAAH, did i scare you again, no? yay. I almost forgot (<- totally) to say that… i think THIS IS really the last thingyes before the oauth stuff. i really think i am going to burst into flames and become a cooked space birb… kfa (i hope you get it [its a acronym of a whole word {also, hi and thank you for reading this long journals that may be very boring or unnecessary to read}])"}, {"post_id": 11100, "ts": "2026-06-18T04:45:50Z", "hours": 4.8661, "text": "ah, beautiful api docs. I reworked the api docs (because they were a messy mess because of my past laziness [not understandable!!]) and now they are organized in pretty folders (tags) with correct descriptions and titles. now its even helpful to read the api docs to understand how to use a api handler, not having to dig into the code [noone does that :(] right, I DID THE EMAIL CHANGE THING and LOGIN tooo wohooo…. yeah it isn’t that amazing lol. at the start i was just thinking about using the typical chacha encryption that ive used for the TOTP stuff but for a random token nanoid’d… you just don’t, hMAc is fine. Ended up with a dual like verification flow where both the old email AND the new email get a token link (well, now it just the token string because, ahem, i dont have a frontend). both have to be verified before the change goes through. sooo, no more “oh noes, not again, someone got into my account and changed the mail to their own, smh”. then you just get the notif saying “hey, your email has been changed”. SEEECOND, login (your username) changing magic that is way simpler because I just check if you have sudo enabled and that you havent changed it in the last 24 days (why not). Just like with the email stuff, you get a notification saying “yay, you changed it!”. and I think that’s the last of the tiny stuff i wanted to do before the BIG and PAINFUL oauth stuff. i think i am going to burst into flames and go boom and the floor is covered with dust and feathers. OH wait, i sitll need to do account deletion… whatever its just a simple “hya you need sudo”, “are you sure about this”, “ok, bye” flow. meh. i also need profile pictures… heh backblaze or maybe cloudflare idk i like backblaze more but uhh I GOTTA RESEARCH OKAY!?! shall you see the probabaly useless screenshots that atleast show the tiny progress that i always do. great"}, {"post_id": 3935, "ts": "2026-06-07T02:04:58Z", "hours": 3.2119, "text": "beep bwap. firstly, what a waste of argon2. I was using it for encrypting the otp codes and.. dude, that’s like its just 6 characters. I just swapped to the typical hmac256. I also made a common cookies helper method to not have 2 (or more) instances of the same cookie making method. uhh, also I adde dhte forgotten passkey management handlers… and that’s it. OH WAIT, i also added validation! I mean, its pretty rough and very bad but it works for what I want! I, in theory, was going to use Garde for the validation with axum-valid to provide me with the base stuff. I DID NOT WORK, like I had (and still have) to make a wrapper around their sutff so I can send out my own error messages and not some plaintext like before i handled them. right, it did not work because of something called the “Context” … I tried everything to make it work, but I just could not, not even doing workarounds and C&P examples directly and stuffies, it just would not work like it wanted the global context to have a trait implemented, which I did, but it still would not work. I guess its because to use my global context inside axum, i wrap it around an Arc and maybe it didnt like that? or whatever meh wa. I just swapped to using Validate, and ta-da works as it should. HERE’s your badly made screenshot showing the crappy validation messages (they just say: “this field is bad :(”)"}, {"post_id": 3560, "ts": "2026-06-06T15:40:12Z", "hours": 0.8356, "text": "added a better way to handle required authentication!… middleware. yup, i am very creative. it’s practically a qol improvement in the development side, making code look a bit nicer without seeing in every single protected route the same 3 lines to check if the user is authenticated. now i can “enforce” it when I want the user to be reallly unauthenticated to use a route. to use it, you just “add the middleware and maybe move one flag” and that’s it… goddamit I should have had that before to not write a heck ton of “if not authenticated or if authenticated…”. i am trying to delay the inevitable.. the need of making the oauth side and the frontend ;D"}, {"post_id": 3518, "ts": "2026-06-06T14:25:42Z", "hours": 3.6319, "text": "I started using a master key for everything and fixed the server returning a plain text message when parsing goes wrong. FIRST, I have seen the future and the future says that I WILL be suffering if I have more than 2 secret keys to manage when I can just derivate them from a single master key. AND EVEN rails does that! its just blake3’s key derivation with a xor to fill the remaining bytes that some libraries require. it works pretty great. neat. SECOND, this was a problemo that one of the flavourtown (yes flavour not flavor) reviewers made me notice. When you send a malformed json body, like a new line on a field that really doesn’t expect a new line, the server would plainly return a error message in plain text, which is really bad for the client to handle and even for looks. Sooo, I tried fixing it trying to strap a error handler to axum… yes I dont even know if that even exists bruh. In the end i just created a newtype that wraps the original Json extractor from axum to catch its errors and THEN and only then wrap those with my own error messages. And bob’s your dad, the server now return a json error message like every other route error. shall you see the useless screen recording (its cropped by stardance’s ui, great)"}]...
|
Title: meow auth by @moon | Stardance
Devlogs:
I Title: meow auth by @moon | Stardance
Devlogs:
I started using a master key for everything and fixed the server returning a plain text message when parsing goes wrong. FIRST, I have seen the future and the future says that I WILL be suffering if I have more than 2 secret keys to manage when I can just derivate them from a single master key. AND EVEN rails does that! its just blake3’s key derivation with a xor to fill the remaining bytes that some libraries require. it works pretty great. neat. SECOND, this was a problemo that one of the flavourtown (yes flavour not flavor) reviewers made me notice. When you send a malformed json body, like a new line on a field that really doesn’t expect a new line, the server would plainly return a error message in plain text, which is really bad for the client to handle and even for looks. Sooo, I tried fixing it trying to strap a error handler to axum… yes I dont even know if that even exists bruh. In the end i just created a newtype that wraps the original Json extractor from axum to catch its errors and THEN and only then wrap those with my own error messages. And bob’s your dad, the server now return a json error message like every other route error. shall you see the useless screen recording (its cropped by stardance’s ui, great)
added a better way to handle required authentication!… middleware. yup, i am very creative. it’s practically a qol improvement in the development side, making code look a bit nicer without seeing in every single protected route the same 3 lines to check if the user is authenticated. now i can “enforce” it when I want the user to be reallly unauthenticated to use a route. to use it, you just “add the middleware and maybe move one flag” and that’s it… goddamit I should have had that before to not write a heck ton of “if not authenticated or if authenticated…”. i am trying to delay the inevitable.. the need of making the oauth side and the frontend ;D
beep bwap. firstly, what a waste of argon2. I was using it for encrypting the otp codes and.. dude, that’s like its just 6 characters. I just swapped to the typical hmac256. I also made a common cookies helper method to not have 2 (or more) instances of the same cookie making method. uhh, also I adde dhte forgotten passkey management handlers… and that’s it. OH WAIT, i also added validation! I mean, its pretty rough and very bad but it works for what I want! I, in theory, was going to use Garde for the validation with axum-valid to provide me with the base stuff. I DID NOT WORK, like I had (and still have) to make a wrapper around their sutff so I can send out my own error messages and not some plaintext like before i handled them. right, it did not work because of something called the “Context” … I tried everything to make it work, but I just could not, not even doing workarounds and C&P examples directly and stuffies, it just would not work like it wanted the global context to have a trait implemented, which I did, but it still would not work. I guess its because to use my global context inside axum, i wrap it around an Arc and maybe it didnt like that? or whatever meh wa. I just swapped to using Validate, and ta-da works as it should. HERE’s your badly made screenshot showing the crappy validation messages (they just say: “this field is bad :(”)
ah, beautiful api docs. I reworked the api docs (because they were a messy mess because of my past laziness [not understandable!!]) and now they are organized in pretty folders (tags) with correct descriptions and titles. now its even helpful to read the api docs to understand how to use a api handler, not having to dig into the code [noone does that :(] right, I DID THE EMAIL CHANGE THING and LOGIN tooo wohooo…. yeah it isn’t that amazing lol. at the start i was just thinking about using the typical chacha encryption that ive used for the TOTP stuff but for a random token nanoid’d… you just don’t, hMAc is fine. Ended up with a dual like verification flow where both the old email AND the new email get a token link (well, now it just the token string because, ahem, i dont have a frontend). both have to be verified before the change goes through. sooo, no more “oh noes, not again, someone got into my account and changed the mail to their own, smh”. then you just get the notif saying “hey, your email has been changed”. SEEECOND, login (your username) changing magic that is way simpler because I just check if you have sudo enabled and that you havent changed it in the last 24 days (why not). Just like with the email stuff, you get a notification saying “yay, you changed it!”. and I think that’s the last of the tiny stuff i wanted to do before the BIG and PAINFUL oauth stuff. i think i am going to burst into flames and go boom and the floor is covered with dust and feathers. OH wait, i sitll need to do account deletion… whatever its just a simple “hya you need sudo”, “are you sure about this”, “ok, bye” flow. meh. i also need profile pictures… heh backblaze or maybe cloudflare idk i like backblaze more but uhh I GOTTA RESEARCH OKAY!?! shall you see the probabaly useless screenshots that atleast show the tiny progress that i always do. great
AAAH, sorry, did i startle you? I added audit logs, a health handler (a simple “OK YES i am alive ) and a root info thingy that tells you “okay, so my name is this, mmh yes, and this is my version and my build stuffies…). the audit log thing was not really a pain to add. At first i was thinking of using my job queue (because ITS only use is for emails… and i put my sweat and tears to making it pretty to then not being used lol) but.. why tho, like IF you see how was the code before the audit log adavancement (yes, cement) you can se HOW every action runs already a postgresql transaction. So, why not bundle the audit log adding magic into that same transaction? and so i did. Now, we don’t have to track our selves with pencil (i dont like pens) and paper the actions we do, we just let the application do it for us… leaving a paper trail of our desastrous actions. yay… now that i said that, i should add a random chance of also adding another audit log entry that is just a random “hi, i am your audit log talking”. hah that would be funny. btw, strum is not cool. I thought i could use hte EnumString thingy to make it implement automagaicallytationally the Display trait to snake_case but NOPE, it is used backwards. You give it a string and it gives out the enum variant. what a pee pee poo poo dude, imagine having a big monstrous enum and having to implement Display for each variant… just like the monolithic error enum of the http site… ew. to use it you just sprinkle the audit::log() and boom, done. AAAAAAH, did i scare you again, no? yay. I almost forgot (<- totally) to say that… i think THIS IS really the last thingyes before the oauth stuff. i really think i am going to burst into flames and become a cooked space birb… kfa (i hope you get it [its a acronym of a whole word {also, hi and thank you for reading this long journals that may be very boring or unnecessary to read}])
yayy! the first step of making oauth2 alive has been made. I rewrote the tiny part of the authorization handler of the oauth2 flow… there’s not much to it! It did took a while to reunderstand it because of how long I wrote it (2 months ago) and that I wrote it in a rush (and didn’t even make it work). Basically, the same as always, traceback to try to understand what past me wanted to do, to then rework everything (or at least try) to unspaghettify those radiative peaces of code. So, practically it only the authorization method was half done and ugly, it was a big BIG monolithic method that did everything in a way that either past me or current me like at all because it takes a whole lotta things to work (8 to 9 argumentos lol). In the end i just splitted the big MONOLITHIC (thick) method into two of the same kind but with at least clear and defined and bleh jobs. One when the user has already authorized the client and the other when he has never touched it in its life. I also did some qol for my self (or i think i did, probs not because it was already bad and rushed and stuff… i already said it at the start) with the oauth helpers and stuff by also prettifying them and simplying parts that I really don’t know why I added. Like I added mr “OauthResponse” which, as the name implies, makes the oauth response (redirect, plain error, error with redirect) instead of the 3 different methods I had to use to do the same thing, easier is better (and even understandable!). Ah, and i even tried to use strum but nope, it do not cut the job (it tries to cut the wall instead of the thing i want). NOW, sHALl the work continue to make the token making handler and then the OpenID stuff that may be a bit difficult because, with my shitty reading, i think ill have to juggle making jwks and stuffies to server correctly the food for the picky openid. here’s the video that shows, confusingly, that indeed the handler works (It does a “hi, oh you want to authenticate with ‘poop’, let me create a pending authentication. Oh! you accepted the consent, let me delete the pending one and create the actual lasting consent for ‘poop’.). god, i am so bad at coding or whatever the this is:
you know? i love debugging my code when the error was the entire time in the db. great job me!!!! I’ve made the token handler. again, as other devlogs, that’s all folks. Stupid me couldnt figure out why client secret was always bad, why the mr code verifier was always bad when it was the same as the stored one aaand why the heck scopes werent showing. i really do love that my code, practically, worked first try (MY CODE >:3). But did NOT love that i am still stupid and forgot that i had a database that works as the house for the data that my app ingests. god i am smart. time to go suffer with openid i guess. i have to touch jwt and stuff, eugh.. i like my opaque tokens more than jwts, because IF you want to revoke one of them you still HAVE TO STORE A LIST OF IDS… that defeats the whole hecking purpose dude, not worth it (or that’s what i think for now, smh i am just a space birb claking at keys). here’s your video that shows that it does work and gives the bearer opaque token and creates the db entry:
oh hi, did not know that you are really reading this. I added the openid stuff! Well not all of it, I still need to do the ‘userinfo’ endpoint but meh, it works as it should. I also added the cool JWK (the secret key [ES256] that is used to sign the JWTs) rotation stuff, which I can say that I tried at first over complicating it to then end up simplifying it because it was A HELL to use like you had to call a thousand hecking things or in one method give a thousand arguments (its an overestimation, probs not real [shy of 5, it wasnt generic, it was attached to the token flow] :3), it was a pain to use and IT EVEN GAVE ME a burn mark. As I said, I just redo’d everything and boom, simplified thigny you just call from the global state and boom, we do be working! The JWKs are rotated every 2 months, and the old one is retired at the same time. After 1 month, the retired one is deleted. So, at any given time, there’s a maximum of 2 keys, the current one and the retired one. The retired one, as the name implies, is not used to sign new tokens but is still valid to verify old token. And all of this is fetched at startup and then via a scheduled job it is updated. AND as you might have (NOT) guessed the JWKs are stored in the database, so if you have multiple instances of mah meow meow server running, they all share the same JWKs and rotate… OH GOD THEY DO NOT ROTATE THEM AT THE SAME TIME GODDAMIT AAAGH.. the intention was there okay? I did that to, in one part, give more use to my job manager and, to let all isntances update at the same time but big brain me did not think that a job is always locked to the instance that picks it up. also the token endpoint now supports using openid and spitting out a ‘id_token’ with the user info (some claims are gatekeept behind the scopes [like ‘profile’ or ‘email’ duh]). that’s it actually, like i started really pulling my hair, fluff, feathers whatever because I was trying to overcomplicate it a lot and i really dunno why. like, for another example, i kept swapping from the ‘jsonwebtokens’ and ‘compact_jwt’ crates because I wanted to use ES256 but didnt want the other because i never used it but then ended up using the latter because it was easier, and then that I wanted to use EC25519 which is apparently not really talked about in the rfcs (that’s why i ended up with ES256! [also supported on compact_jwt]). AH! and also in the job queue, for the JWK rotation, I wanted first to add cron job for that but… why tho, I don’t really need it, I just need a way to NOT run a job until a specific time and then reschedule it inside the same worker. here’s the shitty screenshots showing the oh wow ‘openid configuration’, oh wowie ‘it does output tokens and id_token’, oh thats nice ‘it does give out a valid jwt with valid claims that the programmer didn’t even do themselves because they used a library called compact_jwt’ and wow ‘it does have a job that tries to autorotate if the current key is older than two months’:
I made the User Info handler for the open id stuff. that’s the end of it. It works, wahoo my self yay good job, even though you had pretty much bad scrambled code, you did it hahaha. It practically, as the openid spec says, returns the claims used also on the id_token. Soo, because its sooo close to the id_token, i’ve decided to just eat the that same id_token but spit out a converted version with things I want. I also added the typical OauthManager and RequiresOauth. the latter one not having a param to decide what scopes you want because, whhy would you want that?! its just a one liner and it may change for each hecking endpoint or even the data the endpoint returns. its just over complicating it with wrapped trash. … and about my devlogs, i realized that mine are pretty bad and not interesting like other people’s devlogs. i simply write weird and long ones. but i don’t want to write a simple “I did this, commits, hardness of implementing, whatever” in bullet points like other people do. i dunno it feels flat like this devlog. Here’s you typical SINGLE screenshot showing that the user info works, that’s it:
hi, hello i am space birb in the sad corner and i am here to tell you that i added the the typical oauth management handlers that everything has. I also added a generic paginated database thingy to be able to make… pages when there’s more than 20 items (rows). firstly, everything was easy. yes, no rocks not nothing that could set me on fire… minus that I HAD TO MAKE a paginated database thingy. WHY did i make it? idk man, i wanted because my bad coder brain thought that maybe someone could have more than 1 oauth application created (like a thousand) and that’s pretty bad for mr blue elephant database becuase that means eating 1000 rows in one go (and blue elephant doesnt like that, AND EVEN less if my vps has 1vcore and not really that much ram). SO, the best course of action was to make pagination to be able to cut in pieces the data and make it easier to load and handle.. even though the loaded rows are hardcoded (its 20 plus 1). The pagination practically works by seeing if there’s more data after 20 items (that’s why it has a “plus 1”!), if so, we take the LAST item’s id (using a trait to access it, because you can’t really know in what form or what id will be used in any database model) in those same 20 items to set the ‘next’ param. That ‘next’ param is used to.. quite literally say “hi, uh could you give me the next rows after this id pretty please?” and boom works and i didnt set my self on fire but i did ruffle my feathers a bit because of. Ill probably implement it to more places because the only places that use it are the oauth applications and user sessions because i am a bit lazy haha (i mean, its just C&P the current find_many* and use the pagination stuff and caboosh). oh god, i forgot about the oauth consent management. great job me, NOW IT ISNT COMPLETE “everything” great coder i am great big bird brain. My next plans are just to do some general cleanup with the openapi schema, add comments to the code and then start doing the frontend in mr sveltekit.. although i am too rusty in ts land and i will have to learn some stuff again and touch again scss and stuffies and god, i am going to get cooked in the sun and roasted like the space birb i am because of me no longer touching anything javascript. here’s your really useless screenshots showing the INCOMPLETE oauth management handlers and the pagination thingy working:
hi and welcome to my unreadable journals. I added those oauth authorized applications management handlers that I forgot to add yesterday, like the typical “oh let me see what scopes does this thing use… OH GOD IT CAN SEE MY fur color I MUST revoke it NOW!11”. Then I moved AAAL the handlers that touched ME user data to the.. obvious /me route so its prettier and doesnt pollute the air of the real auth related things. and did some cleanup in the http error department by merging some repeated errors. god this is one of the shorter entries i’ve made i think. next up is doing ratelimting, probably roles or just an admin api and the “hey your account has been locked because of repeated tries to login”. i dont even know what will it take to make tests work god. here’s your shitty screenshot showing my only progress, the oauth management bleh bleh bleh:
hello again, its a me, a random space birb that is here to tell you that I completly forgot about the ratelimiting stuff. BUUT, I added the admin methods and UserFlags to be able to set… flags. not much rodeo this time. had to think how i wanted the audit logs to work for the admin stuff. I first though about just having a bool saying “ah yeah admin” but meh, I think its better to have also an “actor_id”, the who did it user id, and boom. In the user side handlers for the audit log I just return the typical plain response of “yeah this was changed” (not sql joins, cheaper [?]) but in the admin side, I return the actor_id with some other things like the user login of the actor AND the user login of the user that was changed (cause why not!? its jsut another join statement in sql). Works wonderfully and even better now because before I had setup the user audit log to fetch AAAL the entries form the db and pee pee poo poo no, now that i have my paginated stuff, no way! SOO, the admin methods are just the typical ones, see what the user has changed or an admin changed from an user via its audit logs, the oauth applications and authorizations management and that’s it. I will probably also add a way to know globally what the heck is being changed but idk about that, seems a big sql query (that is tiny but very costly in db terms) and I frankly want to avoid that… and even more avoid using redis because i hate it and that SOMEHOW i have better some beautiful organized code vs the first version of this backend where I used the typical DB+redis aaand it was ugly . i hate that. I also added the UserFlags to be able to set flags like “is the user an admin?” or “is this user allowed to manage its oauth applications?” and so on. Pretty cool. BUUT as always, I had to C&P some code (almost all of it) from past handlers to make the admin handlers work lol. I would really want to make a central place to put all the common handler code but meh. IT WORKS! and that’s what matters. THe next things are just making the ratelimiting WHICCHC probably will be only inside the instance the user is reaching and that’s it. I would like to have global ratelimiting using the IP of the user or its account id but that would (i think) require redis… I really need to think about this because someone with a crappy toaster can make explode my poor baby vps. ps. god do I really take that much time doing stuff? god i am slow at coding. i am bad goddamit. that’s it. shallllll you see my shiitty api docs with the admin stuff and admin auditlogs becuase why not:
wow. that’s a long time doing nothing. I just updated the deps, tera had a change on its templating because it was rewritten from the ground up. pretty cool, now it kinda looks like jsx and at the same time not. I also tried or well… I am thinking about making my own ratelimiter but was like, ugh. I was practically mega blocked on the idea of wanting a ratelimiter that used the IP + UserId. Both are easy but for some goddamn reason I kept going circles and circles and honestly I dont even remember why anymore, like huh!? In the end I will only be doing ratelimits via IP because they are the easiest AND THEY DO NOT NEED TO be stored in the database. yes database, you read it right. IN this version of my backend I wanted to use the least things AAANd the oNly thing required is just the database to make everything. Adding redis would be waste (and waste of ram) for just storing the ratelimiter. Redis would be required if I wanted to run more than 1 instance of my application AND IF i wanted to distribute the info about “oh this guy is grounded, no entering the meow auth realm for 5 minutes” to all other running instances. BUTTT, as you might not see, I dont want to run more than instance nor want to distribute it to more instances if it were the case that I wnted to run more than 1 instance. Soo, I went in circles in my crapppy bird brain because to add ratelimits via the user id I would have to store the info somewhere that wouldnt be erased (like in the in-memmory storing that i will be using) or else the ratelimits would be useless because… THEY WOULD BE ERASED from this whole realm when the instance is restarted (memory goes boom to the void, so does the ratelimiter). That’s why I want to just implement the Ip based one, its the easiest one and the only one that I don’t care about loosing the information about the ratelimits when the instance is restarted. Also, i need to implement it yet lol i was just scrambling my head nuts and bolts hearing them clank while trying to ratchet them. ALSO², i need to redo the email stuff because my brain has came up with a cool design lol but first gotta do the frontend to make it uhh look good before suffering making the email components. I also started to hate the tera zed language extension. its crap. bad crap the worst one. ALSO, here’s your really useless screenshot this time showing code that you can already see on the github page (yay!1):
right, its a me! the teeny tiny waist sized space birb that is here to tell you that I added the ratelimiter! It works just as i’ve explained in the last entry, it uses the IP of the user to limit the amount of requests via a ticket bucket. THe bucket is stored in memory, as again said before, so if the instance is restarted, goodbye ratelimits. EAch request eats 1 ticket AND the bucket tickets and refill rate can be set via the… middleware. who would have known wow. It always adds the typical “x-ratelimit-limit” bleh bleh bleh with all the info you can like that is useless BUT hey, its there for you. I like making my own stuffies because its cool. THe root has a limit of 500 requests, refilling after 1 second. While the auth routes have a limit of 10 (sudo) and 20 (auth flows) requests, refilling after 1 minute. The other routes are just uhh protected under the umbrella of the root ratelimiter lol, no need for having to add a ratelimiter to every single route (god). that’s it. there’s no more devlog. Now what i gotta start doing is the frontend. I will cry a bit because I am VERY very VEEERY rustified in the typescript department like I never touch it but meh I MUST do a frontend or else this is incomplete… and i will do be crying if i send it off in a incomplete state. THE frontend will be in svelte kit, because its cool and ive already used it in the last iteration and it left me with a good taste in my forked tongue (hahaha, i am space birb) AND thanks that Ive been using from the start utoipa to add an openapi schema, I can use it easily to make requests from the frontend! and i didnt need to suffer adding them after everything was done just like in the past iteration! here’s your useless screenshot showing teh ratelimiter working and the headers and stuffies… god i am a mediocre at best writting long hecking devlogs for nothing:
oopsy. shoooort one, sorry. I added the forgotten oauth error StatusCodes and Descriptions. there’s not much to it lol, I just forgot about it. as always, here’s your even uselesser screenshot with code taht you can already see in the guthub:
a. hi there mr svelte! I was wondering if I should be drafting first a design in figma but meh. I like to suffer and make bad designs that progress very slowly to look mediocre at best! yay!1!! anyways, ill be using scss as always (i frankly done even remember anything about it lol) and sveltekit. HERE’S YOUR stupid “hello world” from slevetkt (reaaly useful devlog):
hi hello. oh, ive been 10 hours doing the same thing!!1 god. So, I was doing the frontend design without using figma and uhh yes. And also removed the ability to use your login to.. login to the app. You just use your email (otp, and passkeys). First, I forgot how to use figma, I only remember some shortcuts. I was going to use it (for frontend and logos) but seeing how struggled to make simple things, I only used it to swap the colors of the logo of MEOW AUTH, hmm yes, very meow. . The frontend stuff… I frankly ALSO do not remember anything.. or well I do now remember some things thanks to me fighting to uncenter a div hah. The stack is practically svelte, as always, client rendered and scss (sassy :o) for the styling. In the start I was just going to use the same styling and structure of my first iteration of this project, beepauth (ew), and after doing all of that I thought “god, this looks pretty bad”, soo I then tried to make it look a bit better WITHOUT starting from zero again. And I did style it a bit better but I didn’t even like it. Like it felt like I hadnt even advanced at all, like if the same shitty fricking backend was the same from the past (probably noone would care because probably uhh noone cares.) [brains a weired and even more mine i guess, wawa]. So, naturally, i did the less sane thing, REDOING EVERYTHING again. Had to watch tutorials to relearn how use sass and picked up also some new css stuff that I wont even use (minus the layers! that pretty cool!!). And from that css stuff I discovered Oklch.. yes i swapped my whole color palette to that using their harmonizer that uses the equivalent of WCAG, APCA (contrast bg to text!). At least the frontend now looks decent (or the first blocks fo the website). sadly the only frcking shitting heckign parts ive made are the login (and register BUT THATS THE SAME). AWIT WAIT WAWA, I also swapped some gears in the BACKEND! I removed the login (username) entirely, now its just demoted to a non unique display name (for openid!). you must be asking why, because I changed it to use the login not long ago. Well, because I don’t have to force a user to give me a username AND their email on signup. Its easier to just give the email. And if you already have an account and hit, without knowing (our typical autopilot mode), the signup page, I can silently make a AuthChallenge for login instead of signup because both handlers return the same result. Then, after registering, I just force you to set a display name (by default its just the email, i could leave it like that but currently I want it to force you set a custom display name for OPENID). By doing that, I practically removed the “vectors” (ooh hackiry stuffiry) for user enumeration [those vectors were the endpoints to see if a login (username) or email was already taken] (I also made so the login endpoint gives you a fake challenge id when the email doesnt exist {This works thanks to having the auth exchange handlers return “invalid code” even if the challenge doesnt even exist}). here’s your screenshot of a login page that looks exactly like very other login page, maybe even shittier (sorry i am bad doing these kinds of things.) [also you have the logo colors, i went with purple because it looks cool and its a cool color] {the “Psst, over here” its just a random greeting, just like the ones i have in the emails} [[sorry for wasting 10 hours doing nothing]]:
i am ashamed. i am that bad or… well ive gotten to the point of real badness and what some call “skill issue” because I CANT make this hecking frontend. its just too hard, i am just way more slower than before and what i though i was. i hate that i am not usign tailwindcss and isntead I am building my own scss styles IN @layer when i could have been using svelte components with the style tag but ugh bad decisions that can be still reverted i guess. For the layout of the settings, i even tried copying how I did it in the last iteration of this frontend (past server, not named meow auth).. i just did not like it because using a sidebar for this teeny tiny amount of information is wasteful (like this tiny [not really tiny] space birb). Like the content is just the typical name, email, auditlog, 2fa, passkeys, sessions, oauth authorizations and user created oauth apps AND lets not forget about the admin panel. i am practically suffering with mundane crap that anyone can have done in probably 10 minutes by asking mr claude or even chatgpt OR even just copying an already made layout, but here i am suffering trying to make stuff my own way, telling my self that this was the worst decision i’ve made goddamit… at this point i will really become a hotpot space birb soup.. i just need one layout made and then it should be an easy job to then copy and paste to other tabs. then the enxt step is to wire it up the forms and have it communicate to the backend which should be an easy task (i think [… oh god please be easy])… i know this entries of the frontend will make my project go into deflation mode and stuff, and i even broken a promise that ive made my self to not make devlogs that are more than 5h long because of a review someone made of my project when i submitted it unfinished to flavourtown (yes, flavortown) which is sad but it is what is. you cant be perfect, that’s why i have a shit hecking design. i am just bad, a bad space bird i guess. i already rambled too much in this suppossedly simple devlog. here’s your half crap “inspiration” that I used to (quite literally did a C&P of the page) of my past proyect using a sidebar (not what i want with this iteration) and the current state of art of my REALLY REALLY SHITTY curernt state page:
in the end i gave up in the design or well… can you even call it “design” when it was ugly even at teh start? yes, i tried my best at making it look “good” in my own eyes but i could not for the love of birds. it was bad anyways, like actually bad. I, to make it easy for my self and be able to copy how other people do it because i am a lazy bastard (stupid space birb that klanks its keyboard for nothing), will be using the typical two columns for each section. One for “what the heck is this section for” and the other for the actual content (wow). man, i hate how the frontend is where i struggle the most when the backend should be where i should have struggled the most, not with this dude. agh. I also hate HOW i thought the layout i wanted initially was the best one and that i look great when in reality it was an aberration that didnt even look good and it really threw to the trash the unused space bruh. it just wasnt for this job, maybe for something else.. idk haha, what I know is that I think it already looks better with the simple sutff ive done lol [that’s sad btw :)]. as you may see int eh screen shooting, the audit log section instead of having a table it uses a… placeholder for a button with the same content it has currently because I frankly i am scared of making tables because of the probable difficulty i will have (because I am already struggling with teh simplest of things!). ALSO, i need to stop making .scss files, compounded into a single css file using @layer and @use , to just use svelte components that use the style tag. it really doesnt change anything, but atleast i wont be doing “class=‘meow’” each time i want something, just using “” is half better lol (doesnt really fix anything, I just want to give use the svelte components). finally, i am planning to use “services”.. they arent really services but more about wrappers around the openapi client. less manual labor for some shitty stuff that i wont need to do anymore. Still, its just a wrapper with nicer method names and namespaces. (also, ill be adding profile pictures. didnt think i would be adding them tho) here’s the typical dumb screenshot of what i think that looks “good” without doing that much work:
haha 10 days later. no progress just me rambling and going in circles. I am a bad space birb. RIGHT! I just were converting the css stuff into svelte components using the style tag (and the preprocessor duh). That’s actually it, quite literally. No progress at all. Wasted time on, still, falling on the loop of trying to get something that “looks good”, but i dont reall know what i want in reality. ofc i try to get “inspiratainionion” from other websites and try to mix them together to then dislike the result, undo and rinse and repeat (at this point my fur and feather soaked hard on water). YOu may imagine it as thinking that you ahve a finish line when you done even know where it is. i will just try to make the frontend work first without thinking about the design… AND i cant even promise THAT! because i will probbaly spiral into the same loop once again (saying oh this looks bad blah bleh bleh). god i am bad at making frontends or evne design or everything, but thats how people learn haha. it is a lesson that i should learn from now on.. i keep judging my work too harsly but i dont know. frontend is just harder for me. here’s the useless non functional three pages that atleast have something layout:
would you look at that! Finnaly some functional pages with forms, ALmost finalized components… oh they are just the login pages….. and its not even all of the auth pages, just selected ones so the auth flow barely works. BUT, THIS fLuffy (not fluffy) space bird has finalllizated converting (or thinks) the classes i had as global styles into beautiful svelte components with all those stars and happy things. happily, i am longer limited by having evertyhign in global space.. oh right, RIGHT. i wasnt even limited :). AND the coolest compponent of all of them is the spinner one because it spins. The first pages have been plugged into an outlet called SuperForms (not really super, mostly helping to validate)! thanks to that, we now have working forms that post to the backend! with all those classic things, red colors and form validation. but, how I THE unfluffy space bird is pushing envelopes with the form inside of it? by talking to my backend obviously! but not manually (doign every step each time manually), by using a library like the trusty openapi-fetch that eats the openapi schema of the server i used in the past iteration. BUT i trashed it into the.. trash because I was fed up by having to repeat a thousand times the same snippet of code in each form or even page (I could have used a service like class to make it easier tho!). it was swapped by Orval! Orval works with the same openapi schema BUT gives methods! No more repeating the same things, just use the method and boom. and also that openapi-fetch was mad that i used a more recent typescript version. ANND, finally, the auth context was upgraded with a leg made of clay so it can now parse the BITENUM flags of, for example, the user (UserFlags) that tell what is enabled and what is not, if you didnt remember. Its practically a generic class with everything that i considered necessary that must be extended to be able to use it. and that’s it. you may watch the shittiest video ever that just shows that it kinda works with the forms and logging in and that’s it with still mocked things:
well hello again. space birb presents you the next devlog. I cleaned up the forms a bit (they are a still bit TOO messy ugly but they do work), REDID the ugly flags class to be a more EEEASIER TO WROK WITH (i dont even know how it worked before lol) and FINALIZED the auth pages! RIGHT right, first frontend. I finally finalized the most basic and empty and everything pages of the frontend! wahoo mee :). these pages practically include the otp one and the 2fa one (+ recovery).. and i just realized that i forgot about the passkey one, great so now it isnt finished (fried space bird thingy). Redid the pin component so it works with my Input form component AND also fixed some weired quicks of the pin component in phones (for some reason, my phone, didnt respect the max lenght of the input. i just sliced the value of the input on my max length lol). And finally, the frontend now has the most precious bit of any… i dont know. i just added the typical dropdown componetn for the avatars (yes, this was important for me). while on the backend, because mr past moon made some weired decisions, the 2FA recovery code generator and giver of the code the state was a messy mess that I frankly dont know if I even tested it, because it accepted wrong codes? i dont even remember if it worked haha in the past BUT now it works as it should and its at least better readable with normal method names (not plainly “recovery” [… what does that mean anyway!?? you would need to look at the code to understand it! and that’s bad]). ah, the typical moment has arrived, the one i always repeat. HERE’s your happily working auth pages for once, plus the “want to retry the email sending?”, the passkey one is still missing but that’s just slapping some paint (and painting my self) and boom (whhile this is practically the same as the past devlog, it just works better than the past devlog lol):
would you look at that, 10h… i love wasting time. Now THIS thing fetches some bits of data like the audit log, my passkeys, adding those and even modifying the username (you are forced to do it)! BUT big buty, i had to add the mr /signup/complete where you set your prefered username, like moon (its a me!), or else the backend will straight up refuse anything you want to do. AFTER changing it, you can do everything else a normal user can [by Default the username is just the user’s email AND THAT IS NOT PRETTY AT ALL >:(] FIRST OF all i grabbed my magic cup for tea and made the audit log page (it does not even have anything special)! .. oh right, for that i needed to know how the heck you even send requests with tanstack. so uhh,, blah bleh bluh wawa BOOM i now know how to call a method and get my data back AAnd even make infinite fetchers (IT kinda hates my way of giving data [its wrapped in {3} onion layers {request.data.data.data}, the ones that make you cry a bit]). i also synced my auth state with the tanstack client so it doesnt do two trips every time. okay now. TO make the audit log thingy, i did some beautiful matching so the type, creation and guy who did the action (probably the user) are actually human readable with a limit of 8 items (or else the /me page would be as long as this project’s crappy devlogs). When there’s more, a beautiful “view more” button appears (separate page). For this, so called “view more” page, i used the infinite queries. while at first i just puuushed the data into the dom with the #each (svelte thingy), chrome do be VERY very mad when there’s a lot of entries in there (The audit log, because it logs actions in your account, can get very huge. Because actions like the baddie Session action logs each time you log in or log out), SOO i did what someone whose browser is eating more than 10gb does, using a virtual list to render the it! (IT only renders items when they are visible, hidding [removing from the dom] non visible ones. this fixes the “OH gosh THOSE 200 things THAT I CANT EVEN SEE, ARE EATING MY precious ram”). OHh and you can press ESC to leave the page because i made a cool component that lets me plug in a callback for specific keyboard events :D. SECOND, the passkey stuff. yeah, pretty easy thanks to libraries like SimpleWebAuthn that do the hard work of telling the browser “hey, authenticate this guy please” or “hiya, registrate this passkey please”. its just querying what passkys you have to know… hwat passkeys you have and that’s it. BUT sadly, an actually sadly, my passkeys are non resident (I cant have a simple button to just login, I need you email before i can use the passkey). Thaaat means I havea teeny big tiny small user enumaration problemo becuase the backend can reveal that an user has a passkey registered and, in turn, we know that user is registered. a bad guy can just atack with “oh noes, your passkey has been stolen. pls give a undecillion of moneys”. third, i had to add the sudo page. It does what you think, reauthenticate to do sensitive operations like adding a passkey. Pretty simple, it redirects directly to an email code if the user does not have a passkey or totp enabled (email code is always enabled), if they have those, it just shows a selection screen. fourth, i had to fix up some stupid things with the api schema of the backend becuase I either forgot to put a body on the responses (like the passkey/webauthn routes) or just fix up a teeeeeny tiny setting thing that wasnt correct (its the webauthn/passkey rp_origin [allowed pages to register/use a passkey} becuase it jsut used the backend url and THAT is not correct). so tahat’s it, shall you see some stupid screenshots and not even a video because i havent even finished everything:
hi hello this is space bird. i have eaten 9h hours of real world time in just making the dialog component. I mean, IT WAS for making the 2FA prompts for when you wanted to enable it or disable and bleh bluh.. atleast it does look great… and i still need to add icons. the prompt is just the typical 2fa enable that gives you a qr or the 2fa secret if you cant scan the qr. The dialog component was pretty much made in nothing, in air time (free :D). the thing that took a bit was just the styling BUT WAHT did take a BIG LOOOT of time was just making the 2FA dialogs. lik gha damn hecking “2FA prompt” and “beep boop enabling dialogs”.. why?! becuase they are PACKED like a lasagna with forms, tanstack fetching, dialog steps and other stupid stuff to make it atleast not confusing for the user to navigate with tree sized buttons that dont work (becuase you are on the wrong step!!!!1 or already did everything lol). i mean, besides that custom stuff, it just reuses components like the pin or qr svg and… for now, also uses the spinner icon on the buttons you click to manage 2fa as i couldnt be asked to add real icons for now (leaving them for lasts). next up working work is more dialogs (for the passkey setup [so it isnt just a spinner without any “magic guideance”]), a collapsible comp to wrap the info items to show EVENTUALLY some metadata like, in the session items, browser, ip, what user was that did that thing and etc. Its just so i dont balloon the “info items” BECaUSE they are supposed to be some kind of “quick info”. broom brroom, i love wasting time on these stupid things (and wiring them!) >:3. LEAVING that tiny goofy work that apparently took hours to do. I am thinking and WILL be doing a beautiful swap into using resident passkeys (the ones that dont require me to know the user’s email in advance). yes, i know i said before that i dont wanted and ew ew resident. but man, its just easier for the end user to click a magical button to login directly. AND AND this even protects me from someone slapping the meowbackend with the email fish to see who is registered (with a passkey) by checking if the user’s email makes the selector appear. still, some part of me still thinks this is really bad idea but i want to do it tho… what could go wrong hah! i might aswell go to the cooking pot already and make some uhh chicken soup made of space birb. that’s it, i still feel like i havent done anything. Here’s your beautiful video of showing the beautiful dialog going “hi” “goodbye” (the video shows me enabling 2fa, viewing recovery codes and disabling it [with a recovery code]):
hi hello hiiii, stupid space birb back from long bed sleep break. CATCHING UP, i have swapped to resident passkeys, fixed jwk refresh feature not working, beautified toml settings, added 2fa replay protection and audit log beautification. alright.. prepare for a long boring devlog as always. I finally swapped to resident passkeys after thinking about it for days (hours)! That means.. NO MORE user enumeration problemo with passkeys, yippie. it wasnt really a pain in the feathered buttocks, like it was just enabling a crate flag and boomy boom (and it even works on the frontend!). also, i patched with scotch tape a stupid buggy bug about the email templates, becuase I used a lazylock to store the email templater engine stuffy, when SOME random goofy template or data was wrong for whatever reason, it would poison the lazylock and the next time it was used it would just say “oh noes, i am broken, poisoned my childs. GO HECK YOUR SELF”… i just fixed the template part by checking if tera likes them in the global state creation. i love scotch tape, it smells great. while doing that, i finally addressed the beautiful jwks not updating on all instances because in MY JOB QUEUE only one running server instance can eat the job. that means, if you have 2 instances running, the one that is the unfortunate one that didnt eat the job will have stale jwks until the next time it is restarted. fixed it with some beautiful blue elephant database screaming “HEY GUYS, THE JWKS HAVE BEEN UPDATED” and the other instances will be like “oh, okay, i will update my beautiful jwks now”. finally, 2fa, or as i like to call it, TOTP, has been taken cared like a baby and then thrown again to the battle field after giving it the power up of replay protection. That means, if you use a code, it will be marked as used and you cant use it again (this only works with valid codes). makes you wait more smh. THE SETTINGS got a layer of microscopic makeup because i was like “man, these setting name are weired? what if the settings file had comments to know what the heck is this beautiful knob named ‘do_not_touch_this’”. yes i did that. it was a big red booty pain as i had rerereremember how to do proc_macros and how the heck did i even update the toml files with new entries without making them implode with gibrish. AND WE ALL KNOW NOW that ‘do_not_touch_this’ is a setting that if you set it to true, it will make this space birb implode in flames and become dust (yes, like a real firework going CHIRPAAAAAAAAAAAH pop ). and the final thing given some body work spray was the audit log. no more caveman moonbeeper style ‘log’ method with a thousand things. now we have the SAME thing but as a builder with a ‘save’ method. it just makes the code easier to read and understand. also, the audit log now has a “what resource¿” and “what ip?” and i removed the audit entry making from inside the auth helpers to outside. it was just an inconvenient place to put it, i dont evne know why would moonbeeper put it there… oh right i am moonbeeper. I DID IT BECAUSE it was a great place in those times. alright, HERE’s your typical bad screenshots that are trashign and god i am sleepy:
pew pew cabosh, wawah space birb is very sleepy. BREAKING NEWS, i added and changed a lot of things so i could make a delicious soup of changes that changed my old changed code that i yes. minimal frontend work called making the passkey section button go crazy with colors, authenticator icon (just search “aaguid explorer”, its not crazy work) and having a dialog telling “hi do you want to rename this, no? okay”. I also have collapsibles that hide info from your lil nonfluffy face when its useless. Now my crappy server knows from where you are connecting (who would have known that a server could know that) and where you live (oh no [its approximated from your ip]). THe latter only works when the instance is proxied under cloudflare (it even gets mad if a request doesnt have the headers it wants when you have enabled the “under cloudflare” mode). the audit log single method to do everything™ has been swapped with a builder (i love this), AND its info now includes that same ip and location (actor related [who did it]). all fields are now obligatory for… audit log purposes, because before i just pushed null on the db for things i didnt want to show the user MAKING a pretty stinker audit log that does not show who did what. i really dont know whata past me thought, because you can keep everything on the db and just show what you want to the user. idk, past me thinking in uhm not portals (yes). okay, more slurry of things. mah beautiful fix so the JWKS (signing keys used to… sign a jwt! [important for OpenID]) update when the database JWKS changed, spammed the hell out of the db and log as it polled instead of waiting for the db (or an instance) to say “I UPDATED IT GUYSS!1”!1”. This comes from the instances cache’ing JWKS instead of saying “could you repeat that” to the db (too many requests = blue elephant cry and explosions), so they need to know when the db changes or THEY WILL BE out of sync!! mr past me also thought that it was a good idea to store the oauth token code (used to get an access token) in plaintext in the muffing db, SMTH YOU SHOULDNT AT ALL DO. now its just hashed via hmac just like everything else. man i am GOOOD at this job of so called programming, having to go back to edit a thing i called done AND then HAVINGTO edit and edit and edit. this is so fun that I WILL BURST into FLAMES because of how stoopid i am meanwhile, you also have me deserving to be cooked with rice because I made a condition in the oauth token exchange that when SOMEONE somehow miss types or gets access to the oauth token code but has the wrong client_id, the temporary code gets deleted… and you know what i forgot? i forgot to commit the changes to the db, so the code never was deleted lol. i love these kind of stupid goofy pain errors that arent even errors. AALSO I reprettyfied the oauth helpers because after working on them a long time ago, i didnt know what were they doing and it wasnt fun nor funny >:( [i was mad {i am still mad, with that space birb… i want to sentence past moon to sad corner jail for 12 seconds}]. NOW teeny tiny additions!“1 the ratelimiter now exposes a “Retry-After” per a hacker news old moldy article i found, plus exposes its headers on cors. the audit log now does its job even in more parts! now it also tracks the totp recovery code usage [i frankly forgot about it :(].Changing your email or name now requires sudo minus the name on register. AND the app startup has now a beautiful banner saying “meow auth” in cursive. its pretty :3, makes it stylishinning. I also moved and added to the service manager (the watcher) a way to have service names and to launch services from inside of it (for some reason i used a method that was outof place for ages lol). oh no my time has come nnonono, i give you permission to see my trashy work in screenshot format (so modern)… yet i shall push towards completion of this meowing meow meow authing meow auth server:
ooh this is really bad. i have to engage turbo mode again… oh noes OH NO. Wasted big time making the oauth consent and own apps management frontend, fixing stuff past me got wrong or didn’t implement because i was lazy. i am still lazy. i also added a tiny amount of ui legos and fixed a stupid db brain logic error. Right, we gotta move as my devlogs, journals, texts whatever this is, are very very long. noone will read them. they will hate it. I WILL BURN MOON TO A CRISP GODDAMIT. My beautiful backend got a really thin coat of fixes, including a stupid error ive made. The error came from making a db constraint so a user could authorize an app only once. OKAY, but what happened? Only one user could ever authorize an app, because past me left unique constraints on the user’s id and oauth app’s id in both pending and actual authorizations. Basically i forgot to delete the single unique constraints (“int meow unique”, unique is the constraint!) while the tuple (its the “THIS COMBINATION OF THINGS MUST BE UNIQUE”, not each individual field like a normal “int meow unique”). you don’t know my confusion searching why i couldnt authorize the same app from another user lol.. i keep repeating it but GOD DAMMIT PAST ME i hope i become uhm… let’s see… a space birb hotdog nom nom with ONLY ketchup. thanks. Ah, right CORs. ohohoho, cors. I swapped from “oauth debugger” to “oauth playground” because I.. forgot the word debugger and stumbled upon mr. oauthplayground(.io)… I DIDNT KNOW THERE WAS A BETTER THING THAN THE OAUTH DEBUGGER I USED. THIS NEW THINGY thing is a million times better AND can even test OIDC and fetch the “.well-known” oauth metadata endpoint for both modes (oauth 2.1 and oidc). good stuff. But ofc, as always, here comes the mr. cors shinanigans. You should know that I made ALL my routes under “/v1/*” allow requests (via cors) from my frontend ONLY. Bad decision, as oauth clients need routes too, like.. i dont know.. the token endpoint that LITERALLY lets an app access whatever it asked for?… look at my paws or hands or whatever, what would be the best way to fix this? correct you deserve an star with a little uhm feather, separating the oauth part of my server into paths that the frontend will only use and paths that others will use (so no cors [heh tldr lite]). The paths the frontend touches still have cors… it makes me feel safe. also, because of the frontend cors, i couldnt redirect from the frontend consent page to the client’s backend because it was outside of the frontend origin. i had to workaorund it with a html form because I ABSOLUTELYTLITNINTATITONAIIONY REFUSED to add an entire json struct for a simple goofy response with one field named “redirect_to”. FINNALY, the oauth frontend part finally exists!! the consent page loads the pending flow (see stupid screenshot), shows the app and the scopes in human words (minus openid, which i hide because its literally useless for the user). Then you have the typical list of your own apps to manage (see screenshot), with a create button (yes, its a requirement). And lastly the authorized apps HAS NOW real data too with the app name, boom, last used date, boomy and human readable scopes… its very ugly as i really DONT KNOW HOW TO make it stylish hahaha. also NEW legos for the frontend were born out of my hands for my fun, say hi to mr checkbox and the checkbox box (its a box that has a checkbox :]) plus did some cleanup on the button square style and separated the mute style. hiii guys. anyways, this is it. i have to enable my turbo mode. i must enable or all of this was for nothing AND I WANT MY PRIZZE (even though this is clearance week… AWW MAN WHY DID I PROCASTINATE THIS HARD) >:( OR ELSE me angy with wall as always. ah, the time has come to greet you to my shitty screenshots, including one of my badly stupid drawings depicting me saying that the authorized apps collapsible is ugly:
oh hi again, i guess my turbo mode is half engaged. i killed the bitflags. YES, the mr “scope” bitflags for the oauth2.1 that would make me recompile the whole backend jsut to add a new scope. like, imagine wanting “boots” to exist and having to type… WITH MY KEYBOARD AND RECOMPILE!? ew. NO MORE! now the scopes live in the settings.toml and get registered on startup. Just push shome keys in the settings, restart and boomby boom new usable scope. I will miss the recompiles… (i will not :]) RIGHT! My beautiful scope registry just stores the identifier (the name, fancy name because.. yes) of the scope with its scope definition. What’s the scope definition? … it already says it in the name, its the definition of the scope that includes, again, the identifier, the description to show in consent pages or when managing an application, the allowed application ids for when you want one scope to only be usable by specific applications because you like controlling everything, the allowed client type (first party or third party) and the required user flags which is like “is this user even allowed to BE OFFERED this scope?. Scopes are obviously stored now as a text field in the db, parsed like civilized birds with identifiers converted to lowercase, spaces made into “_” aaaand everything else that isnt ascii just gets thrown out. (for example, “MOOOOON BEEPER” -> “mooooon_beeper”). and course you can ask what youre allowed to use. just ask mr meow meow (meow auth 2) server “hey server, here’s my app, what scopes can i pick?” aand it throws you the scopes you can use filtered by your own user flags, the application’s type and the allowlist. You can also just say “hey servah, what scopes can i use independant of my app (what global scopes you have)?” to get the global scopes. plus as a little plus plus, now the settings docs are able to push comments on optional types (ahem, the additional oauth scopes). anyways, SCOPES are configurable, additional oauth scopes do have docs or else you wont even know how the heck you can add them AND you dont need anymore to recompile to add a new scope which is nice in the end. i need to keep uhm clanking my clawsw into the keyboard to finish thing and deploy it. SHALL YOU SEE the most beautiful screenshots of my beautiful doc comment and the handler handling the simplest thing (giving the scope name and descirption, ah so beautiful):...
|
1793472737.3042033
|
1794077537.3042033
|
|
67714
|
meow by @Szyszka | Stardance
|
Szyszka
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: meow by @Szyszka | Stardance
|
1793112851.1190968
|
1793717651.1190968
|
|
6640
|
meow by @cyril | Stardance
|
cyril
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: meow by @cyril | Stardance
|
1793267375.9556055
|
1793872175.9556055
|
|
42021
|
meow by @hadsunomepi | Stardance
|
hadsunomepi
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: meow by @hadsunomepi | Stardance
|
1793159611.371411
|
1793764411.371411
|
|
238
|
meow by @junya | Stardance
|
junya
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: meow by @junya | Stardance
|
1793173887.3181648
|
1793778687.3181648
|
|
69313
|
meow by @rizz | Stardance
|
rizz
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: meow by @rizz | Stardance
|
1793130888.675535
|
1793735688.675535
|
|
69314
|
meow by @rizz | Stardance
|
rizz
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: meow by @rizz | Stardance
|
1793130889.5162468
|
1793735689.5162468
|
|
69315
|
meow by @rizz | Stardance
|
rizz
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: meow by @rizz | Stardance
|
1793130890.3596387
|
1793735690.3596387
|
|
69316
|
meow by @rizz | Stardance
|
rizz
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: meow by @rizz | Stardance
|
1793130891.1882353
|
1793735691.1882353
|
|
68588
|
meow by @testing | Stardance
|
testing
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: meow by @testing | Stardance
|
1793123433.0014796
|
1793728233.0014796
|
|
47744
|
meow meow (personal website) by @shreyayadav | Sta meow meow (personal website) by @shreyayadav | Stardance...
|
shreyayadav
|
2
|
14.0
|
11
|
[{"ship_num": 1, "ts": "2026-1 [{"ship_num": 1, "ts": "2026-10-31T16:02:32Z", "hours": 7.0, "multiplier": 1.54, "payout": 11, "blessing": "neutral", "text": "A little website! I wanted to add more sections but life has been crazy lately, so maybe I’ll do that post-Stardance. The challenging part was doing everything by myself with zero prior experience. I had like three tabs open per each line of code in there. I have spent so much time on GeeksForGeeks. No AI, pure human frustation. Apart from a couple of sections about me, the webbed site now also has a page with a picture of ea-nasir with a button to play music! Wanted to add a poetry page where people could see a random quote/poem/prose from my collection of favourites but after testing it in the live server I decided I did not like it. The website can be seen here: https://clumsywordsagain.github.io/meowmeow/", "repo": "https://github.com/clumsywordsagain/meowmeow", "demo": "https://clumsywordsagain.github.io/meowmeow/"}, {"ship_num": 2, "ts": "2026-08-18T14:11:04Z", "hours": 7.0, "multiplier": null, "payout": 0, "blessing": "neutral", "text": "first website! it’s deployed on github. the homepage contains a couple of sections about me and some of my interests and contact details. there is also a silly “shop” page.", "repo": "https://github.com/clumsywordsagain/meowmeow", "demo": "https://clumsywordsagain.github.io/meowmeow/"}]...
|
[{"post_id": 61620, "ts": "202 [{"post_id": 61620, "ts": "2026-09-04T16:37:53Z", "hours": 0.7822, "text": "fixed the image on the shop (i had to go on canva and superimpose the ea nasir picture on the clay tablet picture, i couldn’t get it to work directly though i tried a couple of different methods). added a new section to the about page. tried adding a marquee but then found out that it’s bad for accessibility so i removed it."}, {"post_id": 59583, "ts": "2026-09-01T14:19:17Z", "hours": 0.9431, "text": "adding a background image to ea nasir on the shop page. things did not go as planned here lol. i’m doing this border/background thingy for the first time so i’m trying a few different methods and also adjusting the music button position on the page."}, {"post_id": 58774, "ts": "2026-08-31T10:51:22Z", "hours": 0.6128, "text": "the music button on the shop page is now functional! it was not working before just because of some typos and the fact that i fully forgot to link the js script to the html 💀. also since the dimensions of the icon indicating that the music is paused are different than the dimesions of the icon indicating that the music is playing, there is a difference in size when you click the button. tried to fix that with object-fit: contain; and that did help significantly but they still are noticeably different in size. i’ll see what i can do about that later. i might remake the icons later on canva."}, {"post_id": 58322, "ts": "2026-08-30T18:16:38Z", "hours": 1.2831, "text": "on the shop page, i will be putting some looped music. i wrote the js code for the button to pause/play music (it isn’t working perfectly though, i need to debug it or start again). also made the icon for the paused music (attached below!) i’m going with the first option because the sword used in the second one is from someone’s years’-old reddit art post. i created a reddit account and asked them if i could use it but i have no reply yet, which is why i’m going ahead with the copyright-free spear option. today i also rearranged the folder in my d drive which contains this project’s files and severely messed up some stuff which led to hackatime counting about an hours’ work under a different project but that’s okay. i think i’ve fixed it now, after learning a lot more about vs code terminal commands than i did a couple of hours ago :p."}, {"post_id": 51191, "ts": "2026-08-20T18:11:55Z", "hours": 0.4031, "text": "i didn’t do much today. added alt ids for all images for accessibility! also edited a song to be used as background music on the shop tab of the website. i did use the audio tag and tried it locally but came to the conclusion that i wouldn’t actually like to put it on the live website until i have a clickable button (speaker-shaped? harp-shaped?) to turn it on and off so i didn’t commit the audio bit."}, {"post_id": 50198, "ts": "2026-08-19T10:25:33Z", "hours": 2.8289, "text": "made the design responsive to screen size so it looks better on phones and other screens! took me ages. learnt about media queries; used a mobile-first breakpoint. did a lot of research. spent no less than an hour trying to figure out what was going wrong with the reading section on the website before i realized i used a dot instead of a hyphen while defining the class name i used for it (what circle of hell was that 😭😭). anyway, now the website looks cleaner on different screen sizes!"}, {"post_id": 49589, "ts": "2026-08-18T14:02:28Z", "hours": 1.4064, "text": "added contact info and another page! tried using php for the navbar for the new page (spent quite a lot of time reading about it) but it was a tad confusing so i just copied the navbar code onto the new page for now, will learn other methods later."}, {"post_id": 49510, "ts": "2026-08-18T11:54:04Z", "hours": 2.7536, "text": "added a new section and a navbar! took me quite a while."}, {"post_id": 48838, "ts": "2026-08-17T11:57:19Z", "hours": 2.6675, "text": "started working on my personal website (using the stardance guide and the hack club guide and the magic of the internet)! i’ve only just added an intro and a picture so far. took me quite a while. i also want to add music but i don’t know how that’ll work yet. gonna work on adding links to my social media accounts next. ate cereal some time ago for the first time in ages."}]...
|
Title: meow meow (personal website) by @shreyayada Title: meow meow (personal website) by @shreyayadav | Stardance
Devlogs:
started working on my personal website (using the stardance guide and the hack club guide and the magic of the internet)! i’ve only just added an intro and a picture so far. took me quite a while. i also want to add music but i don’t know how that’ll work yet. gonna work on adding links to my social media accounts next. ate cereal some time ago for the first time in ages.
added a new section and a navbar! took me quite a while.
added contact info and another page! tried using php for the navbar for the new page (spent quite a lot of time reading about it) but it was a tad confusing so i just copied the navbar code onto the new page for now, will learn other methods later.
made the design responsive to screen size so it looks better on phones and other screens! took me ages. learnt about media queries; used a mobile-first breakpoint. did a lot of research. spent no less than an hour trying to figure out what was going wrong with the reading section on the website before i realized i used a dot instead of a hyphen while defining the class name i used for it (what circle of hell was that 😭😭). anyway, now the website looks cleaner on different screen sizes!
i didn’t do much today. added alt ids for all images for accessibility! also edited a song to be used as background music on the shop tab of the website. i did use the audio tag and tried it locally but came to the conclusion that i wouldn’t actually like to put it on the live website until i have a clickable button (speaker-shaped? harp-shaped?) to turn it on and off so i didn’t commit the audio bit.
on the shop page, i will be putting some looped music. i wrote the js code for the button to pause/play music (it isn’t working perfectly though, i need to debug it or start again). also made the icon for the paused music (attached below!) i’m going with the first option because the sword used in the second one is from someone’s years’-old reddit art post. i created a reddit account and asked them if i could use it but i have no reply yet, which is why i’m going ahead with the copyright-free spear option. today i also rearranged the folder in my d drive which contains this project’s files and severely messed up some stuff which led to hackatime counting about an hours’ work under a different project but that’s okay. i think i’ve fixed it now, after learning a lot more about vs code terminal commands than i did a couple of hours ago :p.
the music button on the shop page is now functional! it was not working before just because of some typos and the fact that i fully forgot to link the js script to the html 💀. also since the dimensions of the icon indicating that the music is paused are different than the dimesions of the icon indicating that the music is playing, there is a difference in size when you click the button. tried to fix that with object-fit: contain; and that did help significantly but they still are noticeably different in size. i’ll see what i can do about that later. i might remake the icons later on canva.
adding a background image to ea nasir on the shop page. things did not go as planned here lol. i’m doing this border/background thingy for the first time so i’m trying a few different methods and also adjusting the music button position on the page.
fixed the image on the shop (i had to go on canva and superimpose the ea nasir picture on the clay tablet picture, i couldn’t get it to work directly though i tried a couple of different methods). added a new section to the about page. tried adding a marquee but then found out that it’s bad for accessibility so i removed it.
Ships:
first website! it’s deployed on github. the homepage contains a couple of sections about me and some of my interests and contact details. there is also a silly “shop” page.
A little website! I wanted to add more sections but life has been crazy lately, so maybe I’ll do that post-Stardance. The challenging part was doing everything by myself with zero prior experience. I had like three tabs open per each line of code in there. I have spent so much time on GeeksForGeeks. No AI, pure human frustation. Apart from a couple of sections about me, the webbed site now also has a page with a picture of ea-nasir with a button to play music! Wanted to add a poetry page where people could see a random quote/poem/prose from my collection of favourites but after testing it in the live server I decided I did not like it. The website can be seen here: https://clumsywordsagain.github.io/meowmeow/...
|
1793617025.0581567
|
1793703425.0581567
|
|
19264
|
meowOS by @arman | Stardance
|
arman
|
1
|
9.0
|
164
|
[{"ship_num": 1, "ts": "2026-0 [{"ship_num": 1, "ts": "2026-06-24T12:38:21Z", "hours": 9.0, "multiplier": 17.32, "payout": 164, "blessing": "neutral", "text": "What did I make? A browser based desktop OS. It has a boot screen, a window manager, a taskbar, desktop widgets, and seven apps and its all cat themed. You can open and drag windows around, change your wallpaper, use a terminal, write notes, check the time. It actually feels like an OS, which was the whole point. Live at https://meowos-web.vercel.app What was challenging? SSR kept biting me. Next.js renders on the server first, so anything touching localStorage or window would crash on Vercel even when it worked fine locally. Took a while to track down every spot that needed a guard. The window maximize animation also gave me grief windows would snap and drag at the same time in this weird magnet effect. Fixed it by separating animation state from logical state so the transition only fires during the toggle, not while dragging. I also tried adding route transition fades between boot, shutdown, and desktop. Spent a few hours on it, kept breaking things, eventually just cut it. What am I proud of? The boot screen. Kernel text prints line by line, fades into a paw icon, then routes to the desktop. It’s a small thing but it makes the whole OS feel real. How to test it? Go to https://meowos-web.vercel.app you’ll land on the shutdown screen, click to boot.", "repo": "https://github.com/armansinghh/WebOS", "demo": "https://meowos-web.vercel.app/"}]...
|
[{"post_id": 15021, "ts": "202 [{"post_id": 15021, "ts": "2026-06-24T12:26:06Z", "hours": 3.1114, "text": "well its done guys what i built? i actually had no idea what to start with, i saw a webOS listed, thought it was pretty cool… i love cats, so why not build a cat-styled OS? u guys can check it out here: https://meowos-web.vercel.app/ whats next? just check it out guys (pls 🙏) note i wrote a highly technical long dev log but it all vanished when i closed the tab accidently, i dont have energy left to write all over again 😔😔 also follow me on github https://github.com/armansinghh thanks y’all"}, {"post_id": 14184, "ts": "2026-06-23T05:35:23Z", "hours": 5.0883, "text": "Spent a lot of time this session just making things feel right 😮💨 Added boot screen and the best part… Rebuilt most of the apps from scratch basically. PawWatch now has an actual analog clock face with cat ears on top and a digital readout next to it. MeowPad got autosave, word count and char limit. PawShell now remembers your command history and arrow keys work just like a real terminal. The settings app (PawNel) got a full sidebar layout, a live desktop preview when picking wallpapers, and an About page showing the stack. Also added two new apps: File Cat-alog is a file explorer with a fake filesystem you can navigate. Also added PrrSurf, it is a browser with a cat themed homepage with shortcuts to Wikipedia, AccuWeather, and Excalidraw. Taskbar got cleaned up too, the paw menu and control center both feel much more polished now. Honestly meowOS is starting to look like something I’d actually want to use. Next up is some final polish and getting it ready to ship 😝"}, {"post_id": 11296, "ts": "2026-06-18T14:09:31Z", "hours": 1.2869, "text": "Built the core of meowOS today!!! A fully working window manager in the browser. Windows are draggable, resizable, and stack correctly when focused. 4 apps so far: Clock - live time and date Text Editor - write and save notes, persists with localStorage Terminal - commands like help, meow, echo, date Settings - pick from 4 cat wallpapers, choice saves across sessions Stack: Next.js, Tailwind, Zustand, react-rnd, react-icons. Next up: File Explorer and Browser app."}]...
|
Title: meowOS by @arman | Stardance
Devlogs:
Buil Title: meowOS by @arman | Stardance
Devlogs:
Built the core of meowOS today!!! A fully working window manager in the browser. Windows are draggable, resizable, and stack correctly when focused. 4 apps so far: Clock - live time and date Text Editor - write and save notes, persists with localStorage Terminal - commands like help, meow, echo, date Settings - pick from 4 cat wallpapers, choice saves across sessions Stack: Next.js, Tailwind, Zustand, react-rnd, react-icons. Next up: File Explorer and Browser app.
Spent a lot of time this session just making things feel right 😮💨 Added boot screen and the best part… Rebuilt most of the apps from scratch basically. PawWatch now has an actual analog clock face with cat ears on top and a digital readout next to it. MeowPad got autosave, word count and char limit. PawShell now remembers your command history and arrow keys work just like a real terminal. The settings app (PawNel) got a full sidebar layout, a live desktop preview when picking wallpapers, and an About page showing the stack. Also added two new apps: File Cat-alog is a file explorer with a fake filesystem you can navigate. Also added PrrSurf, it is a browser with a cat themed homepage with shortcuts to Wikipedia, AccuWeather, and Excalidraw. Taskbar got cleaned up too, the paw menu and control center both feel much more polished now. Honestly meowOS is starting to look like something I’d actually want to use. Next up is some final polish and getting it ready to ship 😝
well its done guys what i built? i actually had no idea what to start with, i saw a webOS listed, thought it was pretty cool… i love cats, so why not build a cat-styled OS? u guys can check it out here: https://meowos-web.vercel.app/ whats next? just check it out guys (pls 🙏) note i wrote a highly technical long dev log but it all vanished when i closed the tab accidently, i dont have energy left to write all over again 😔😔 also follow me on github https://github.com/armansinghh thanks y’all
Ships:
What did I make? A browser based desktop OS. It has a boot screen, a window manager, a taskbar, desktop widgets, and seven apps and its all cat themed. You can open and drag windows around, change your wallpaper, use a terminal, write notes, check the time. It actually feels like an OS, which was the whole point. Live at https://meowos-web.vercel.app What was challenging? SSR kept biting me. Next.js renders on the server first, so anything touching localStorage or window would crash on Vercel even when it worked fine locally. Took a while to track down every spot that needed a guard. The window maximize animation also gave me grief windows would snap and drag at the same time in this weird magnet effect. Fixed it by separating animation state from logical state so the transition only fires during the toggle, not while dragging. I also tried adding route transition fades between boot, shutdown, and desktop. Spent a few hours on it, kept breaking things, eventually just cut it. What am I proud of? The boot screen. Kernel text prints line by line, fades into a paw icon, then routes to the desktop. It’s a small thing but it makes the whole OS feel real. How to test it? Go to https://meowos-web.vercel.app you’ll land on the shutdown screen, click to boot....
|
1793587979.7110806
|
1793674379.7110806
|
|
65934
|
meowmeow ew by @deepm33 | Stardance
|
deepm33
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: meowmeow ew by @deepm33 | Stardance
|
1793094460.6647565
|
1793699260.6647565
|
|
54652
|
meowmeowmeow by @salithecat | Stardance
|
salithecat
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: meowmeowmeow by @salithecat | Stardance
|
1793559326.5128405
|
1794164126.5128405
|
|
33538
|
meowybot by @Jolly | Stardance
|
Jolly
|
1
|
1.0
|
0
|
[{"ship_num": 1, "ts": "2026-0 [{"ship_num": 1, "ts": "2026-07-13T04:10:10Z", "hours": 1.0, "multiplier": null, "payout": 0, "blessing": "neutral", "text": "not much to add lol", "repo": "https://github.com/jollyroger182/meowybot", "demo": "https://hackclub.enterprise.slack.com/archives/C0BHPL1LZ8Q"}]...
|
[{"post_id": 27508, "ts": "202 [{"post_id": 27508, "ts": "2026-07-13T04:08:25Z", "hours": 1.1856, "text": "i made a bot! it’s a very simple bot that uses hack club ai and is very meowy. check out #meowybot!"}]...
|
Title: meowybot by @Jolly | Stardance
Devlogs:
i Title: meowybot by @Jolly | Stardance
Devlogs:
i made a bot! it’s a very simple bot that uses hack club ai and is very meowy. check out #meowybot!
Ships:
not much to add lol...
|
1793573473.0681171
|
1793659873.0681171
|
|
60766
|
mern by @Sukuna | Stardance
|
Sukuna
|
0
|
13.0
|
0
|
[]
|
[{"post_id": 78889, "ts": "202 [{"post_id": 78889, "ts": "2026-10-11T21:47:28Z", "hours": 9.5328, "text": "Complted"}, {"post_id": 65513, "ts": "2026-09-10T18:23:50Z", "hours": 3.4633, "text": "working on the mern learning fullstack development"}]...
|
Title: mern by @Sukuna | Stardance
Devlogs:
worki Title: mern by @Sukuna | Stardance
Devlogs:
working on the mern learning fullstack development
Complted...
|
1793037013.9438648
|
1793641813.9438648
|
|
63537
|
mesa by @rajaryan1492007 | Stardance
|
rajaryan1492007
|
1
|
12.0
|
0
|
[{"ship_num": 1, "ts": "2026-1 [{"ship_num": 1, "ts": "2026-10-26T10:50:18Z", "hours": 12.0, "multiplier": null, "payout": 0, "blessing": "neutral", "text": "last ship of this . it open source contribution in mesa(linux gpu driver) . i fix descriptor_heap crash problem that got merge in NIR mesa . about test ? if ur using linux in mesa its already in realease other pr are still in review .", "repo": "https://gitlab.freedesktop.org/rajaryan1492007/mesa", "demo": "https://gitlab.freedesktop.org/rajaryan1492007/mesa/-/blob/main/README.rst?ref_type=heads"}]...
|
[{"post_id": 70234, "ts": "202 [{"post_id": 70234, "ts": "2026-09-18T19:19:45Z", "hours": 11.7567, "text": "got my first pr merged"}]...
|
Title: mesa by @rajaryan1492007 | Stardance
Devlo Title: mesa by @rajaryan1492007 | Stardance
Devlogs:
got my first pr merged
Ships:
last ship of this . it open source contribution in mesa(linux gpu driver) . i fix descriptor_heap crash problem that got merge in NIR mesa . about test ? if ur using linux in mesa its already in realease other pr are still in review ....
|
1793587833.5267751
|
1793674233.5267751
|
|
67425
|
meshcore takeover! by @Jupiter_Planet | Stardance
|
Jupiter_Planet
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: meshcore takeover! by @Jupiter_Planet | Sta Title: meshcore takeover! by @Jupiter_Planet | Stardance...
|
1793109232.1589148
|
1793714032.1589148
|
|
64172
|
mesite by @pirates_from_space | Stardance
|
pirates_from_space
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: mesite by @pirates_from_space | Stardance
|
1793058735.911323
|
1793663535.911323
|
|
60976
|
message bot by @rasul | Stardance
|
rasul
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: message bot by @rasul | Stardance
|
1793037138.5668266
|
1793641938.5668266
|
|
60121
|
meteor dodging game by @nasece7065 | Stardance
|
nasece7065
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: meteor dodging game by @nasece7065 | Starda Title: meteor dodging game by @nasece7065 | Stardance...
|
1793033266.0808146
|
1793638066.0808146
|
|
61676
|
meteor shooting game by @nesasax721 | Stardance
|
nesasax721
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: meteor shooting game by @nesasax721 | Stard Title: meteor shooting game by @nesasax721 | Stardance...
|
1793040777.5620606
|
1793645577.5620606
|
|
46753
|
meteoric by @domos000 | Stardance
|
domos000
|
1
|
4.0
|
0
|
[{"ship_num": 1, "ts": "2026-0 [{"ship_num": 1, "ts": "2026-08-12T14:46:23Z", "hours": 4.0, "multiplier": null, "payout": 0, "blessing": "neutral", "text": "meteoric meteoric is a new tab page meant to make your web-surfing as meteoric as possible. 🤔 Why the name meteoric ? The name meteoric is a synonym for ‘very fast’. The name is also a reference to ‘meteors’. This new tab page delivers your search query requests instantly and is also space-themed . This is why I chose the name meteoric for this new tab page. ✨ Features ⚙ Settings Page: There is a settings page where you can choose which search engine you would like to use and it saves that to local storage so, you don’t have to select your preferred search engine every time. 💾 Local Storage Stuff: As I mentioned earlier, the website saves which search engine you have selected so, you don’t need to select your preferred search engine every time you open a new tab. Moreover, in order to make the performance better, the website also saves the URL of the APOD image so it doesn’t need to fetch an image every time you open a new tab! 🤖 AI Usage: Gemini 3.1 Pro (High) in Antigravity was primarily used in partially creating and fixing bugs in JavaScript code. GitHub Copilot was used for inline suggestions for code.", "repo": "https://github.com/adeebur-x64/meteoric", "demo": "https://meteoric-tab.vercel.app/"}]...
|
[{"post_id": 45769, "ts": "202 [{"post_id": 45769, "ts": "2026-08-12T13:56:25Z", "hours": 2.5181, "text": "Devlog 2 I basically finished the whole website now! Settings Page: There is a settings page where you can choose which search engine you would like to use and it saves that to local storage so, you don’t have to select your preferred search engine every time. Local Storage Stuff: As I mentioned earlier, the website saves which search engine you have selected so, you don’t need to select your preferred search engine every time you open a new tab. Moreover, in order to make the performance better, the website also saves the URL of the APOD image so it doesn’t need to fetch an image every time you open a new tab! AI Usage: Gemini 3.1 Pro (High) in Antigravity was primarily used in partially creating and fixing bugs in JavaScript code. GitHub Copilot was used for inline suggestions for code."}, {"post_id": 45257, "ts": "2026-08-11T16:34:37Z", "hours": 1.6139, "text": "Devlog 1 I implemented the base plate for all the code. Surprisingly, fetching the background image from the API and displaying it took ~40 mins which I don’t understand how. There is a blur applied behind the header and search input. I’ve also added a blur behind the header and the input field however, it seems to be currently broken. Currently, the search input is just for show and doesn’t work . I’ll implement the actual logic behind it in the next devlog which will be tomorrow!"}]...
|
Title: meteoric by @domos000 | Stardance
Devlogs: Title: meteoric by @domos000 | Stardance
Devlogs:
Devlog 1 I implemented the base plate for all the code. Surprisingly, fetching the background image from the API and displaying it took ~40 mins which I don’t understand how. There is a blur applied behind the header and search input. I’ve also added a blur behind the header and the input field however, it seems to be currently broken. Currently, the search input is just for show and doesn’t work . I’ll implement the actual logic behind it in the next devlog which will be tomorrow!
Devlog 2 I basically finished the whole website now! Settings Page: There is a settings page where you can choose which search engine you would like to use and it saves that to local storage so, you don’t have to select your preferred search engine every time. Local Storage Stuff: As I mentioned earlier, the website saves which search engine you have selected so, you don’t need to select your preferred search engine every time you open a new tab. Moreover, in order to make the performance better, the website also saves the URL of the APOD image so it doesn’t need to fetch an image every time you open a new tab! AI Usage: Gemini 3.1 Pro (High) in Antigravity was primarily used in partially creating and fixing bugs in JavaScript code. GitHub Copilot was used for inline suggestions for code.
Ships:
meteoric meteoric is a new tab page meant to make your web-surfing as meteoric as possible. 🤔 Why the name meteoric ? The name meteoric is a synonym for ‘very fast’. The name is also a reference to ‘meteors’. This new tab page delivers your search query requests instantly and is also space-themed . This is why I chose the name meteoric for this new tab page. ✨ Features ⚙ Settings Page: There is a settings page where you can choose which search engine you would like to use and it saves that to local storage so, you don’t have to select your preferred search engine every time. 💾 Local Storage Stuff: As I mentioned earlier, the website saves which search engine you have selected so, you don’t need to select your preferred search engine every time you open a new tab. Moreover, in order to make the performance better, the website also saves the URL of the APOD image so it doesn’t need to fetch an image every time you open a new tab! 🤖 AI Usage: Gemini 3.1 Pro (High) in Antigravity was primarily used in partially creating and fixing bugs in JavaScript code. GitHub Copilot was used for inline suggestions for code....
|
1793541304.5702755
|
1793627704.5702755
|
|
55732
|
metropolis technologies! by @tanzeemrockz | Starda metropolis technologies! by @tanzeemrockz | Stardance...
|
tanzeemrockz
|
3
|
21.0
|
64
|
[{"ship_num": 1, "ts": "2026-1 [{"ship_num": 1, "ts": "2026-10-31T16:24:07Z", "hours": 1.0, "multiplier": 1.98, "payout": 2, "blessing": "neutral", "text": "Metropolis - My Personal Portfolio I made this project for Stardance What it has in it It includes a lot about me i.e. Hero Banner with name and a short single-sentence summary Quotes (3 to be exact. 1 is an ayah from the Holy Qur’an, the other two are just quotes.) About Me section (pretty much has the same as the hero banner maybe even less lol) The tech stack and tools I use (e.g. HTML5, etc…) Featured projects Hobbies and interests Contact info My hardware and software setup A very responsive layout Tech Stack HTML5 CSS3 JavaScript Google Fonts (for Google Sans and Noto Sans Arabic) TailwindCSS CDN Project Structure index.html The main landing page of Metropolis. style.css The main stylesheet of index.html main.js The main script file of index.html uses/ The folder containing the index.html for the uses page. uses/index.html The index.html for the uses page img/ The images folder. Preview You can visit the site at metropolis.cyberslayercorpz.dev Conclusion I don’t know why I added this but let this sit here! Btw this page is really cool, but not as cool as you ;) :D", "repo": "https://github.com/tanzeemrockz/my-site-eh", "demo": "https://tanzeemrockz.github.io/my-site-eh/"}, {"ship_num": 2, "ts": "2026-10-31T09:07:29Z", "hours": 18.0, "multiplier": 3.43, "payout": 62, "blessing": "neutral", "text": "Metropolis - My Personal Portfolio I made this project for Stardance What it has in it It includes a lot about me i.e. Hero Banner with name and a short single-sentence summary Quotes (3 to be exact. 1 is an ayah from the Holy Qur’an, the other two are just quotes.) About Me section (pretty much has the same as the hero banner maybe even less lol) The tech stack and tools I use (e.g. HTML5, etc…) Featured projects Hobbies and interests Contact info My hardware and software setup A very responsive layout Tech Stack HTML5 CSS3 JavaScript Google Fonts (for Google Sans and Noto Sans Arabic) TailwindCSS CDN Project Structure index.html The main landing page of Metropolis. style.css The main stylesheet of index.html main.js The main script file of index.html uses/ The folder containing the index.html for the uses page. uses/index.html The index.html for the uses page img/ The images folder. Preview You can visit the site at metropolis.cyberslayercorpz.dev Conclusion I don’t know why I added this but let this sit here! Btw this page is really cool, but not as cool as you ;) :D", "repo": "https://github.com/tanzeemrockz/my-site-eh", "demo": "https://tanzeemrockz.github.io/my-site-eh/"}, {"ship_num": 3, "ts": "2026-08-29T12:59:48Z", "hours": 2.0, "multiplier": null, "payout": 0, "blessing": "neutral", "text": "I made Metropolis Technologies as my personal site and project hub under CyberSlayerCorpz. I built it with HTML5 and Tailwind CSS, with a dark grid background, custom Google Sans typography, cyan accents, and custom Neon Dragon cursors. The most annoying part was honestly Tailwind 😭. I spent way too long fighting with items-center, grid-cols-2, colours, and the Tailwind config. I also ran into issues with the Google Fonts / preconnect setup, which made debugging even more fun. I’m pretty happy with how the final site turned out, especially the project cards and overall dark/cyberpunk look. It’s deployed on GitHub Pages and has sections for my projects, about info, and links. This was made for the Hack Club Stardance Personal Site mission, and I tracked 2 hours and 2 minutes with Hackatime. The site is live, the repo is public, and after all that Tailwind pain, it finally works™ 💀", "repo": "https://github.com/tanzeemrockz/my-site-eh", "demo": "https://tanzeemrockz.github.io/my-site-eh/"}]...
|
[{"post_id": 85653, "ts": "202 [{"post_id": 85653, "ts": "2026-10-31T16:12:25Z", "hours": 1.1383, "text": "so I’ve read the user reviews and well, I’ve made some changes!"}, {"post_id": 85404, "ts": "2026-10-31T08:42:35Z", "hours": 1.2075, "text": "this is going to be the LAST devlog for this project. i have added a new page, LOTS of extra sections, and I have removed the F1 tracker section because ’twas givin me a headache ( i wasted 4 DAMN HOURS on that shi )"}, {"post_id": 85373, "ts": "2026-10-31T07:16:26Z", "hours": 9.3525, "text": "some great changes upcoming. stay tuned! :D"}, {"post_id": 67544, "ts": "2026-09-13T17:55:35Z", "hours": 1.4894, "text": "Yo guys, I just added an f1 score tracker that says what position Max Verstappen got in the last race and his total championship points this season. But OpanF1 was a pain to configure damn cuz a race just ended and it doesn’t like queries at this time lol. Anyways, this is the final project with the f1 tracker"}, {"post_id": 60228, "ts": "2026-09-02T13:49:14Z", "hours": 6.0083, "text": "I just built this site and i had LOTS of issues and all i wanted to do was add a favicon, bg-image, etc. After a few youtube tutorials, reading the mdn docs and w3 schools page and ESPECIALLY STACK OVERFLOW for 67 million times (not quite but), I finally got it. After tinkering with the look for a million times, i settled on a single round ish? pattern bg image and after considering a grid backgrounf for the millionth time, i just settled on that picture. The hero section also has a bg-image of an F1 car and i tried making pills in the ui using s, i found out that i can never make it shorter horizontally and i finally switched to a and now, everything finally work™!"}, {"post_id": 57310, "ts": "2026-08-29T12:57:29Z", "hours": 2.2842, "text": "I spent 2 hours fighting Tailwind for a personal site This project was made for the Hack Club Stardance Personal Site mission. The mission is basically to build and deploy your own personal website, with stuff like HTML + CSS, a public repo with a README, a fully deployed site, and multiple sections/pages. So naturally I decided to make Metropolis Technologies, a personal hub for the projects and random stuff I build under CyberSlayerCorpz. The original idea was pretty simple: dark UI, grid background, cyan accents, project cards, links, done. Then Tailwind happened. I got stuck on the most stupid things 😭 For some reason, getting items-center to behave properly was way more annoying than it should’ve been. Then grid-cols-2 decided it didn’t want to cooperate either. I also spent way too long changing colours and trying to get everything set up properly with the Tailwind config. And then I had Google Fonts. The / preconnect stuff somehow ended up causing problems with the rest of my setup, which sent me down another rabbit hole of wondering why perfectly normal things weren’t behaving normally. Eventually I got everything working and ended up with this: dark grid background cyan accents responsive project cards custom Google Sans typography custom cursor setup sections for my projects, about, and links deployed with GitHub Pages The final result is pretty much what I originally wanted, and I’m actually pretty happy with how the project cards turned out. I tracked the whole thing with Hackatime and ended up spending 2 hours and 2 minutes on it. Honestly, a concerning amount of that time was probably just me staring at Tailwind classes and asking myself why grid-cols-2 wasn’t doing the ONE JOB I GAVE IT 💀 But yeah, it’s finally live and this is my submission for the Stardance Personal Site mission 🫡 Tech: HTML5 + Tailwind CSS + Google Fonts Time: 2h 02m Mission: Hack Club Stardance — Personal Site Status: finally works™"}]...
|
Title: metropolis technologies! by @tanzeemrockz | Title: metropolis technologies! by @tanzeemrockz | Stardance
Devlogs:
I spent 2 hours fighting Tailwind for a personal site This project was made for the Hack Club Stardance Personal Site mission. The mission is basically to build and deploy your own personal website, with stuff like HTML + CSS, a public repo with a README, a fully deployed site, and multiple sections/pages. So naturally I decided to make Metropolis Technologies, a personal hub for the projects and random stuff I build under CyberSlayerCorpz. The original idea was pretty simple: dark UI, grid background, cyan accents, project cards, links, done. Then Tailwind happened. I got stuck on the most stupid things 😭 For some reason, getting items-center to behave properly was way more annoying than it should’ve been. Then grid-cols-2 decided it didn’t want to cooperate either. I also spent way too long changing colours and trying to get everything set up properly with the Tailwind config. And then I had Google Fonts. The / preconnect stuff somehow ended up causing problems with the rest of my setup, which sent me down another rabbit hole of wondering why perfectly normal things weren’t behaving normally. Eventually I got everything working and ended up with this: dark grid background cyan accents responsive project cards custom Google Sans typography custom cursor setup sections for my projects, about, and links deployed with GitHub Pages The final result is pretty much what I originally wanted, and I’m actually pretty happy with how the project cards turned out. I tracked the whole thing with Hackatime and ended up spending 2 hours and 2 minutes on it. Honestly, a concerning amount of that time was probably just me staring at Tailwind classes and asking myself why grid-cols-2 wasn’t doing the ONE JOB I GAVE IT 💀 But yeah, it’s finally live and this is my submission for the Stardance Personal Site mission 🫡 Tech: HTML5 + Tailwind CSS + Google Fonts Time: 2h 02m Mission: Hack Club Stardance — Personal Site Status: finally works™
I just built this site and i had LOTS of issues and all i wanted to do was add a favicon, bg-image, etc. After a few youtube tutorials, reading the mdn docs and w3 schools page and ESPECIALLY STACK OVERFLOW for 67 million times (not quite but), I finally got it. After tinkering with the look for a million times, i settled on a single round ish? pattern bg image and after considering a grid backgrounf for the millionth time, i just settled on that picture. The hero section also has a bg-image of an F1 car and i tried making pills in the ui using s, i found out that i can never make it shorter horizontally and i finally switched to a and now, everything finally work™!
Yo guys, I just added an f1 score tracker that says what position Max Verstappen got in the last race and his total championship points this season. But OpanF1 was a pain to configure damn cuz a race just ended and it doesn’t like queries at this time lol. Anyways, this is the final project with the f1 tracker
some great changes upcoming. stay tuned! :D
this is going to be the LAST devlog for this project. i have added a new page, LOTS of extra sections, and I have removed the F1 tracker section because ’twas givin me a headache ( i wasted 4 DAMN HOURS on that shi )
so I’ve read the user reviews and well, I’ve made some changes!
Ships:
I made Metropolis Technologies as my personal site and project hub under CyberSlayerCorpz. I built it with HTML5 and Tailwind CSS, with a dark grid background, custom Google Sans typography, cyan accents, and custom Neon Dragon cursors. The most annoying part was honestly Tailwind 😭. I spent way too long fighting with items-center, grid-cols-2, colours, and the Tailwind config. I also ran into issues with the Google Fonts / preconnect setup, which made debugging even more fun. I’m pretty happy with how the final site turned out, especially the project cards and overall dark/cyberpunk look. It’s deployed on GitHub Pages and has sections for my projects, about info, and links. This was made for the Hack Club Stardance Personal Site mission, and I tracked 2 hours and 2 minutes with Hackatime. The site is live, the repo is public, and after all that Tailwind pain, it finally works™ 💀
Metropolis - My Personal Portfolio I made this project for Stardance What it has in it It includes a lot about me i.e. Hero Banner with name and a short single-sentence summary Quotes (3 to be exact. 1 is an ayah from the Holy Qur’an, the other two are just quotes.) About Me section (pretty much has the same as the hero banner maybe even less lol) The tech stack and tools I use (e.g. HTML5, etc…) Featured projects Hobbies and interests Contact info My hardware and software setup A very responsive layout Tech Stack HTML5 CSS3 JavaScript Google Fonts (for Google Sans and Noto Sans Arabic) TailwindCSS CDN Project Structure index.html The main landing page of Metropolis. style.css The main stylesheet of index.html main.js The main script file of index.html uses/ The folder containing the index.html for the uses page. uses/index.html The index.html for the uses page img/ The images folder. Preview You can visit the site at metropolis.cyberslayercorpz.dev Conclusion I don’t know why I added this but let this sit here! Btw this page is really cool, but not as cool as you ;) :D
Metropolis - My Personal Portfolio I made this project for Stardance What it has in it It includes a lot about me i.e. Hero Banner with name and a short single-sentence summary Quotes (3 to be exact. 1 is an ayah from the Holy Qur’an, the other two are just quotes.) About Me section (pretty much has the same as the hero banner maybe even less lol) The tech stack and tools I use (e.g. HTML5, etc…) Featured projects Hobbies and interests Contact info My hardware and software setup A very responsive layout Tech Stack HTML5 CSS3 JavaScript Google Fonts (for Google Sans and Noto Sans Arabic) TailwindCSS CDN Project Structure index.html The main landing page of Metropolis. style.css The main stylesheet of index.html main.js The main script file of index.html uses/ The folder containing the index.html for the uses page. uses/index.html The index.html for the uses page img/ The images folder. Preview You can visit the site at metropolis.cyberslayercorpz.dev Conclusion I don’t know why I added this but let this sit here! Btw this page is really cool, but not as cool as you ;) :D...
|
1793602434.1905522
|
1793688834.1905522
|
|
48789
|
mewebsite by @kevingeomat | Stardance
|
kevingeomat
|
0
|
0.3
|
0
|
[]
|
[{"post_id": 48161, "ts": "202 [{"post_id": 48161, "ts": "2026-08-16T13:39:39Z", "hours": 0.2983, "text": "devlog #1 - the beginning Ive just set up the files and the html file is almost fully ready.. What im planning to do is make a chessboard and piano interactive with maybe a football gam.. idk… i feel like im getting ahead of myself… I’ll start of with the chess board ig since thats what i like the most..also basic css has to be handles.. and i dont even know js that well.. im scared"}]...
|
Title: mewebsite by @kevingeomat | Stardance
Devl Title: mewebsite by @kevingeomat | Stardance
Devlogs:
devlog #1 - the beginning Ive just set up the files and the html file is almost fully ready.. What im planning to do is make a chessboard and piano interactive with maybe a football gam.. idk… i feel like im getting ahead of myself… I’ll start of with the chess board ig since thats what i like the most..also basic css has to be handles.. and i dont even know js that well.. im scared...
|
1793245771.3756597
|
1793850571.3756597
|
|
17485
|
mhmh by @Orpheus | Stardance
|
Orpheus
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: mhmh by @Orpheus | Stardance
|
1793195296.3314128
|
1793800096.3314128
|
|
51862
|
mica by @shailesh | Stardance
|
|
0
|
5.69
|
0
|
[]
|
[{"post_id": 52867, "ts": "202 [{"post_id": 52867, "ts": "2026-08-23T07:32:50Z", "hours": 3.3831, "text": "finished the frame design"}, {"post_id": 51475, "ts": "2026-08-21T06:23:29Z", "hours": 1.1756, "text": "basically made the pcb, also made Its size bigger than it needs to, for mounting on top of esc"}, {"post_id": 51448, "ts": "2026-08-21T05:01:00Z", "hours": 1.135, "text": "made the schematics for my xiaoesp32s3 based elrs fc"}]...
|
Title: mica by @shailesh | Stardance
Devlogs:
mad Title: mica by @shailesh | Stardance
Devlogs:
made the schematics for my xiaoesp32s3 based elrs fc
basically made the pcb, also made Its size bigger than it needs to, for mounting on top of esc
finished the frame design...
|
1792925511.300365
|
1793789511.300365
|
|
2228
|
mice's website by @Mice | Stardance
|
Mice
|
1
|
2.0
|
0
|
[{"ship_num": 1, "ts": "2026-0 [{"ship_num": 1, "ts": "2026-07-01T20:11:32Z", "hours": 2.0, "multiplier": null, "payout": 0, "blessing": "neutral", "text": "I decided to redo my old website, since it was esstentially just a page with my socials and not anything related to me. I decided to add animations and a liquid glass vibe to it to replicate fluid movement. I also added sounds that fit the late 2000’s-early 2010’s vibe of the internet.", "repo": "https://github.com/miceoroni/website-v2", "demo": "https://miceoroni.xyz"}]...
|
[{"post_id": 886, "ts": "2026- [{"post_id": 886, "ts": "2026-06-02T16:38:32Z", "hours": 1.1169, "text": "added animations! also fixed mobile support so we should be good in terms of mobile stuff"}, {"post_id": 389, "ts": "2026-06-01T19:08:15Z", "hours": 1.1083, "text": "Started work on this website. decided to change everything over to bootstrap and make it look kinda “liquid glassy”. i added the nxe’s button sounds because it kinda fits the aesthetic a little bit. things i liked: working with html things i need to improve: move the cards from the titlebar. make everything more animated (in/out animations, hover, etc)"}]...
|
Title: mice's website by @Mice | Stardance
De Title: mice's website by @Mice | Stardance
Devlogs:
Started work on this website. decided to change everything over to bootstrap and make it look kinda “liquid glassy”. i added the nxe’s button sounds because it kinda fits the aesthetic a little bit. things i liked: working with html things i need to improve: move the cards from the titlebar. make everything more animated (in/out animations, hover, etc)
added animations! also fixed mobile support so we should be good in terms of mobile stuff
Ships:
I decided to redo my old website, since it was esstentially just a page with my socials and not anything related to me. I decided to add animations and a liquid glass vibe to it to replicate fluid movement. I also added sounds that fit the late 2000’s-early 2010’s vibe of the internet....
|
1793566376.64373
|
1793652776.64373
|
|
51519
|
micro g keybord by @krishchau | Stardance
|
krishchau
|
0
|
0.0
|
0
|
[]
|
[]
|
Title: micro g keybord by @krishchau | Stardance
|
1793393651.5536482
|
1793998451.5536482
|
|
54738
|
micro key by @sammyamd | Stardance
|
sammyamd
|
0
|
0.33
|
0
|
[]
|
[{"post_id": 55208, "ts": "202 [{"post_id": 55208, "ts": "2026-08-26T19:17:07Z", "hours": 0.3336, "text": "I started the schematic for the mini key"}]...
|
Title: micro key by @sammyamd | Stardance
Devlogs Title: micro key by @sammyamd | Stardance
Devlogs:
I started the schematic for the mini key...
|
1793562841.9672816
|
1794167641.9672816
|
|
16551
|
micro:bit Hackpad! by @THEbluefirestudios | Starda micro:bit Hackpad! by @THEbluefirestudios | Stardance...
|
THEbluefirestudios
|
0
|
2.14
|
0
|
[]
|
[{"post_id": 8546, "ts": "2026 [{"post_id": 8546, "ts": "2026-06-14T06:34:03Z", "hours": 2.1447, "text": "Wow, this 3D -printerless Hackpad is becoming very messy. Before you call me stupid, the customs on PCBs and 3D printed parts here in India is ENORMOUS, and I am brokie brokie. Mybe I’ll make a proper hackpad soon."}]...
|
Title: micro:bit Hackpad! by @THEbluefirestudios | Title: micro:bit Hackpad! by @THEbluefirestudios | Stardance
Devlogs:
Wow, this 3D -printerless Hackpad is becoming very messy. Before you call me stupid, the customs on PCBs and 3D printed parts here in India is ENORMOUS, and I am brokie brokie. Mybe I’ll make a proper hackpad soon....
|
1793199251.066756
|
1793804051.066756
|
|
35984
|
microHost by @Ayon | Stardance
|
Ayon
|
1
|
5.48
|
0
|
[{"ship_num": 1, "ts": "2026-0 [{"ship_num": 1, "ts": "2026-07-16T13:09:27Z", "hours": 2.0, "multiplier": null, "payout": 0, "blessing": "neutral", "text": "I made a micro hosting platform where people can host their php scripts for free even on a raspberry pi. This is totally resource efficient, secure and simple.", "repo": "https://github.com/amiayon8/microhost", "demo": "https://microhost.thenicedev.xyz/"}]...
|
[{"post_id": 31338, "ts": "202 [{"post_id": 31338, "ts": "2026-07-19T17:28:03Z", "hours": 0.8286, "text": "After hours of debugging, finally my project is ready to ship with a beginner-friendly console. Thanks to Gemini for helping me in the debugging process"}, {"post_id": 31303, "ts": "2026-07-19T16:26:11Z", "hours": 0.5906, "text": "Completed making the console with everything manageable directly from the console"}, {"post_id": 31273, "ts": "2026-07-19T15:31:41Z", "hours": 0.6825, "text": "Completed the registration and login flow. Now working on dashboard"}, {"post_id": 31252, "ts": "2026-07-19T14:48:56Z", "hours": 1.3825, "text": "Started making the frontend console. Done making the registration page. Using brutalism style."}, {"post_id": 29463, "ts": "2026-07-16T13:03:35Z", "hours": 2.2017, "text": "Commpleted microHost"}]...
|
Title: microHost by @Ayon | Stardance
Devlogs:
Co Title: microHost by @Ayon | Stardance
Devlogs:
Commpleted microHost
Started making the frontend console. Done making the registration page. Using brutalism style.
Completed the registration and login flow. Now working on dashboard
Completed making the console with everything manageable directly from the console
After hours of debugging, finally my project is ready to ship with a beginner-friendly console. Thanks to Gemini for helping me in the debugging process
Ships:
I made a micro hosting platform where people can host their php scripts for free even on a raspberry pi. This is totally resource efficient, secure and simple....
|
1793620538.2645755
|
1793706938.2645755
|