Blog
All articles. All pillars. All authors.
#106 -- Security by Design: OWASP Top 10 in the Language
How FLIN addresses all OWASP Top 10 vulnerabilities at the language level -- not through libraries, not through configuration, but through design decisions that make insecure code impossible to write.
#107 -- Argon2 Password Hashing Built Into FLIN
How FLIN ships Argon2id password hashing as a built-in function -- no bcrypt debates, no configuration, just hash_password() and verify_password() with secure defaults.
#108 -- JWT Authentication in 3 Lines of FLIN
How FLIN's built-in JWT functions -- create_token, verify_token, refresh_token -- reduce token-based authentication to three lines of code with secure defaults.
#125 -- Search Analytics and Result Caching
How FLIN tracks search queries, measures result quality, and caches frequently accessed results -- turning search from a stateless operation into a learning, optimizing system.
#109 -- Rate Limiting and Security Headers
How FLIN provides built-in rate limiting with sliding windows and automatic security headers on every response -- protecting applications against abuse, XSS, clickjacking, and MIME sniffing by default.
#110 -- Two-Factor Authentication (TOTP)
How FLIN implements TOTP two-factor authentication as a built-in feature -- secret generation, QR codes, verification, and backup codes in four function calls.
#111 -- OAuth2 and Social Authentication
How FLIN provides built-in OAuth2 functions for Google, GitHub, Discord, Apple, LinkedIn, and Telegram -- PKCE flows, state validation, and user creation in a standardized pattern.
#112 -- WhatsApp OTP Authentication for Africa
How FLIN provides built-in WhatsApp OTP authentication -- the phone-first auth method designed for African markets where WhatsApp is the primary communication platform.
#113 -- Request Body Validators
How FLIN's validate blocks enforce type safety, constraints, and business rules on incoming request data -- declarative validation that runs before your handler code and returns structured error responses.
#114 -- 75 Security Tests: How We Verified Everything
How we wrote 75 security tests for FLIN covering password hashing, JWT tokens, rate limiting, guards, CSRF, input validation, and session management -- ensuring every security feature works correctly.
#115 -- Custom Guards and Security Middleware
How FLIN developers create custom guards and security middleware for application-specific access control -- verified email guards, subscription checks, IP restrictions, and audit logging.
#069 -- FlinDB vs SQLite: Why We Built Our Own
A detailed comparison of FlinDB and SQLite -- where they overlap, where they diverge, and why we built a custom database engine for the FLIN programming language instead of embedding SQLite.