The Hidden Cost of “Just Add a Setting”
“Can we just add a setting for this?” It sounds harmless. Suppose an office should be able to choose its default appointment duration. The f...
Sep 9, 2026
![First Post](data:image/svg+xml;utf8,<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100"><defs><linearGradient id="gFirst" x1="0%" y1="0%" x2="100%" y2="100%"><stop offset="0%" stop-color="%238b5cf6" /><stop offset="100%" stop-color="%23ec4899" /></linearGradient><filter id="fFirst"><feDropShadow dx="0" dy="2" stdDeviation="3" flood-opacity="0.3"/></filter></defs><circle cx="50" cy="50" r="45" fill="url(%23gFirst)" filter="url(%23fFirst)"/><circle cx="50" cy="50" r="38" fill="none" stroke="rgba(255,255,255,0.4)" stroke-width="2"/><path d="M60 30 C 50 30, 40 40, 35 55 L 30 70 L 45 65 C 60 60, 70 50, 70 40 C 70 35, 65 30, 60 30 Z" fill="%23ffffff" opacity="0.9"/><path d="M35 55 L 45 65" stroke="%23ec4899" stroke-width="2"/><circle cx="65" cy="25" r="3" fill="%23fef08a"/><path d="M65 15 L65 20 M65 30 L65 35 M55 25 L60 25 M70 25 L75 25" stroke="%23fef08a" stroke-width="2" stroke-linecap="round"/></svg>)
![Early Bird](data:image/svg+xml;utf8,<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100"><defs><linearGradient id="gEarly" x1="0%" y1="0%" x2="100%" y2="100%"><stop offset="0%" stop-color="%23c2410c" /><stop offset="100%" stop-color="%23fb923c" /></linearGradient><filter id="fEarly"><feDropShadow dx="0" dy="2" stdDeviation="3" flood-opacity="0.3"/></filter></defs><circle cx="50" cy="50" r="45" fill="url(%23gEarly)" filter="url(%23fEarly)"/><circle cx="50" cy="50" r="38" fill="none" stroke="rgba(255,255,255,0.4)" stroke-width="2"/><path d="M20 65 Q 50 10 80 65" fill="%23fef08a" opacity="0.9"/><rect x="20" y="65" width="60" height="15" fill="url(%23gEarly)"/><circle cx="50" cy="50" r="12" fill="%23ffffff"/><path d="M60 50 L 70 55 L 60 60 Z" fill="%23fcd34d"/><circle cx="48" cy="48" r="2" fill="%23c2410c"/></svg>)
15 min
Subscribe to Ismail ZAHIR's Newsletter
Get new articles and engineering posts delivered to your inbox.
Stop Creating an Endpoint for Every Button
There is a pattern that feels completely natural when building an API. The frontend gets an Approve button, so the backend gets an endpoint:...
Sep 7, 2026
9 min
My Pull Request Failed — Because GitHub Actions Was Protecting the Repository
Sometimes the most useful security lessons don't start with a security audit. They start with a failed CI job. Recently, while contributing ...
Sep 4, 2026
9 min
I Built an Angular Authentication Layer for the Signals Era
How I designed `ngx-auth-client` around reactive state, provider-agnostic authentication, functional guards, and safer token handling.
Aug 31, 2026
16 min
Building a Reusable Keycloak Theme Architecture
Customizing a Keycloak login theme is styling. Doing it for a second brand without copying the first one is architecture. Here is how a base...
Aug 15, 2026
9 min
OAuth 2.0, OpenID Connect, and Keycloak: Understanding Modern Authentication
OAuth 2.0, OpenID Connect, JWT, access tokens, refresh tokens, Keycloak. These get mentioned in the same breath so often that they blur into...
Aug 7, 2026
10 min
Why I Validate Angular Compatibility Using the Published npm Package (Not the Source Code)
Most Angular libraries claim compatibility across multiple Angular versions—but how many actually verify it? Here's why I stopped testing my...
Jul 31, 2026
5 min
I Stopped Copy-Pasting the Same Angular ApiService. Here’s What I Built Instead
Four projects in, I was copying the same api.service.ts instead of writing it. The design decisions behind extracting it into @ismailza/ngx-...
Jul 30, 2026
7 min