Okta's NextJS-0auth troubles

NextJS Security Vulnerability

Duck (<a href="https:&#x2F;&#x2F;duck-lang.dev" rel="nofollow">https:&#x2F;&#x2F;duck-lang.dev</a>) is a statically typed, compiled programming language that combines the best of Rust, TypeScript and Go, aiming to provide an alternative for full-stack-development while being as familiar as possibleImprovements over Rust:
- garbage collection simplifies developing network applications
- no lifetimes
- built-in concurrency runtime and apis for web developmentImprovements over bun&#x2F;node&#x2F;typescript:
- massive performance gains due to Go&#x27;s support for parallel execution and native code generation
- easier deployment since Duck compiles to a statically linked native executable that doesn&#x27;t need dependencies
- reduced complexity and costs since a single duck deployment massively outscales anything that runs javascript
- streamlined toolchain management using duckup (compiler version manager) and dargo (build tool)Improvements over Go:
- a more expresive type system supporting Union types, Duck typing and tighter control over mutability
- Server Side Rendering with a jsx-like syntax as well as preact components for frontend development
- better error handling based on union types
- a rust based reimplementation of tailwind that is directly integrated with the language (but optional to use)
- type-safe json apis

Show HN: Ducklang: Achieving 100x more requests per second than NextJS

Show HN: Previewcn – a Shadcn/UI theme previewer directly inside your NextJS app

Umami affected by NextJS CVE-2025-66478

Building with NextJS (When You'd Rather Use Svelte)

A quick blog template built using NextJS and SleekCMS

See also: <a href="https:&#x2F;&#x2F;blog.cloudflare.com&#x2F;react2shell-rsc-vulnerabilities-exploitation-threat-brief&#x2F;" rel="nofollow">https:&#x2F;&#x2F;blog.cloudflare.com&#x2F;react2shell-rsc-vulnerabilities-...</a>, <a href="https:&#x2F;&#x2F;nextjs.org&#x2F;blog&#x2F;security-update-2025-12-11" rel="nofollow">https:&#x2F;&#x2F;nextjs.org&#x2F;blog&#x2F;security-update-2025-12-11</a>

Denial of service and source code exposure in React Server Components

Hey all!Long time lurker, thought I would contribute back something to the community (at least the meat eaters in the UK). One thing that&#x27;s been a pain for me to get a good understanding of is what the best price is for online butchers based around the UK. I like high quality meat (including some of the bigger cuts for kamado&#x2F;bbq), and I&#x27;m willing to pay a premium however there isn&#x27;t a single resource that would let me get an overview of what&#x27;s available and price movements over time.For my Xmas meat I didn&#x27;t want to start building out a spreadsheet so I built a price tracker with quite a few convenience features to make it easy to search for certain cuts of meat across commonly mentioned butchers on Reddit and other communities.If you find it useful let me know if there are any features that could help to make it even easier to find the cuts of meat that you&#x27;re looking for!Here&#x27;s the tracker: <a href="https:&#x2F;&#x2F;offer-spider.onrender.com" rel="nofollow">https:&#x2F;&#x2F;offer-spider.onrender.com</a>Hosted on Render, built with Nextjs and SQLite. Spidering various custom e-com sites (WooCommerce, Shopify) on a daily basis.My current TODOs:
- Search is currently free-text OR. Add AND to allow focussing down a search, and select from facets&#x2F;categories&#x2F;taxonomy
- Common search terms to pre-fill
- Exposing price over time metrics
- Further consolidation of SKUs to an internal taxonomy
- More butchers
- Expanding to other use cases outside of meat!

Show HN: UK Butchers Meat Price Tracker

I built Cossistant as a lightweight, open-source alternative to Intercom&#x2F;Zendesk for NextJS&#x2F;React devs. You can embed it with a simple NPM command and under 10 lines of code.The goal was so far to be a very very good human to human support platform, the next goal is to enable AI agents to auto-handle 80% of queries (train on your docs and knowledge) and eventually escalate to humans when needed.Everything is customizable with Tailwind or your custom React components.Support tools are bloated, pricey and never FEEL &#x2F; LOOK like your product, this is why it&#x27;s being shipped as part of your stack and not coming from someone else&#x27;s.It&#x27;s already generally available!Feedback&#x2F;debates are welcome, what&#x27;s missing?

Show HN: Cossistant – open-source and open components support widget for React

Last Week, I was tired of hunting through scattered sources to find the best Black Friday deals on premium apps and software so I decided to create a centralized directory myself.Using Claude Code, I vibe coded the entire Black Friday deals directory in just 2 days, and the results have been incredible.Stack:Nextjs for Frontend
Convex for Database
Umami and Posthog for analytics
Dodopayment for PaymentIn less than a week, it’s attracted 4,000+ visitors, with 500+ coming in just the last 24 hours (Analytic is public on website, so you can verify the traffic yourself :))The directory features lifetime deals and product bundles on premium apps and tools, curated specifically for developers, creators, and entrepreneurs looking for genuine value.If you’re hunting for Black Friday deals on premium software, check it out And if I’ve missed any great deals, drop them in the comments.

Show HN: I Curated Premium Black Friday Deals for SaaS and Apps

Hey HN! We built Agent Runner, a model-agnostic, open-source agent harness that executes the same prompt against two anonymized coding agents in parallel sandboxes. Each agent can make tool calls, edit multiple files, and self-correct through iterative reasoning. You pick the better result - this becomes the ground truth for the leaderboard.Why we built it
Traditional benchmarks often fall short for modern agentic systems: they rely on static tasks and only measure final outputs. But real coding agents modify multiple files across a repo, answer to user re-prompts, use tool calls, and recover from partial failuresWhat Agent Runner does
You ask it to build anything
Agent Runner kicks off two generations from different sandboxed LLM providers (OpenAI, Anthropic, Google, xAI, Mistral, Kimi, and more)
Anonymized models make tool calls, multi-file edits, and cater to reprompts
You pick your favorite - this preference powers the benchmarkBecause different providers handle tool calls, prompts, and execution semantics differently, we worked with each provider to ensure configurations reflect intended behavior. These provider-specific setups remain private, but Agent Runner itself is open-source.How to try it
Kick off Agent Runner at <a href="https:&#x2F;&#x2F;www.designarena.ai&#x2F;agentarena">https:&#x2F;&#x2F;www.designarena.ai&#x2F;agentarena</a>
Repo at <a href="https:&#x2F;&#x2F;github.com&#x2F;Design-Arena&#x2F;agent-runner" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;Design-Arena&#x2F;agent-runner</a>
Use it as a CLI tool: <a href="https:&#x2F;&#x2F;pypi.org&#x2F;project&#x2F;agent-runner&#x2F;" rel="nofollow">https:&#x2F;&#x2F;pypi.org&#x2F;project&#x2F;agent-runner&#x2F;</a>
pip install agent-runner
agentrunner run “create a nextjs replica of Discord”We hope this provides a provider-agnostic, framework-agnostic, realistic benchmark for state-of-the-art coding agents.Video demo: <a href="https:&#x2F;&#x2F;youtu.be&#x2F;rdtiuCHatjs" rel="nofollow">https:&#x2F;&#x2F;youtu.be&#x2F;rdtiuCHatjs</a>

Show HN: Agent Runner – open-source agent harness to benchmark real coding

I forked Chromium and went through the plumbing to embed a ReactJS&#x2F;NextJS web app in its Side Panel like OpenAI&#x27;s Atlas browser and Perplexity&#x27;s Comet browser.The Side Panel has access to the browser&#x27;s DOM which you can pass as context to LLMs in your web app. Supports hot reloading for faster development.Hopefully this is helpful for web devs who haven&#x27;t, or don&#x27;t want to, touch C++ and Chromium, but want to build a native AI experience into browsers.

Show HN: Build your own Atlas/Comet AI-browser (open source)

Through taking the excellent CSE 507 class at UW (Solver Aided Programming) I learned about Rosette, a Racket-based programming system that interfaces with SAT&#x2F;SMT solvers.I applied Rosette to the problem of generating autogramic pangrams, aka self-enumerating pangrams: sentences that contain every letter of the alphabet AND describe themselves.The front end (NextJS&#x2F;Vercel) passes constraints to a Dockerized Rosette program hosted on Cloud Run.Feedback and comments welcome! And Happy New Year!

Show HN: Generating self-enumerating pangrams with constraint solving on the Web

Title says it all. Any ideas welcome. I know Next JS, Typescript and Python.

Ask HN: I'm bored, what should I build

Two months ago I was laid off due to oil market conditions, so I decided to finally try the path of building my own product.I’m a web developer and worked for industrial companies for the last 15+ years, but always watched from the sidelines how everybody was building beautiful startups&#x2F;SAAS websites.I truly believe that every website today should have an AI chatbot that actually works for the business while they sleep: answer questions, capture leads, and reduce support load. This is something I really feel is useful.It enables businesses to create and train their AI chatbot using their website and documents, then embed it directly on their site. The chatbot captures leads automatically and has a ticketing system. I know this market is tough, but I&#x27;m just trying to capture a small percentage of it, while helping businesses in the process.Tech stack?: Nextjs with Typescript and Tailwind (love and hate it, but that&#x27;s for another day), Supabase for database and auth, AWS.This is the first time I have shipped anything like this solo, so any feedback would be greatly appreciated, and I&#x27;m happy to answer any questions.Thank you again for reading!

Show HN: After being laid off from a corporate job I built my first AI Startup

Hi HNI have been working on Skedular a platform that helps organizations councils co working spaces and local businesses manage bookings shared spaces and multi location operations in a simple modern wayWhat Skedular does<pre><code> - Manage rooms desks studios sports facilities meeting spaces and any kind of bookable asset
 - Handle multi location multi team scenarios
 - Provide public booking pages for venues
 - Offer a clean dashboard for operators to manage availability payments customers and schedules
 - API first design for easy integration with existing systems
 - Built with modern tooling including Nextjs NET backend PostGIS and Kafka events
</code></pre>
Why I built itMost booking platforms are either too simple or too enterprise heavy Skedular is meant to sit in the middle powerful enough for councils or large organisations but simple enough for a local venue owner to use without training.I am currently onboarding early users and would love feedback from this community especially around UX data modelling and scaling patterns.Links<pre><code> - Public website https:&#x2F;&#x2F;getskedular.com
 - App website https:&#x2F;&#x2F;skedular.app
</code></pre>
Looking for feedbackI would appreciate thoughts on the overall concept any edge cases I might be missing suggestions for UI and UX improvements and pain points you have experienced in managing bookings or shared resourcesThanks for taking a look
Morteza

Show HN: Skedular, a Smart Booking and Workspace Management Platform

I'm bored, what should I build?

so we&#x27;re closing the year , and in 2025 one thing i got tired of was constantly getting feedback from people say &quot;this is not working on the site&quot; and i didnt want to go through all that &quot;sentry&quot; stress , yeah i know sentry isnt difficult to setup , but the dashboard kinda looked too overwhelming and &quot;enterpriseyy&quot; so i built gmail for bugs (basically you see your errors as emails in an inbox) and it takes 4 lines of code to get startedbut the interesting part is , ive been able to create the nextjs SDK , and React and nodejs , so i&#x27;d recommend the full sdk setup , but the script tag is just a simple way to get started

Show HN: Made a simple way to catch production errors with 4 lines of code

AI, agents, and other robots frequently get domain details wrong. The AI Domain Data Standard fixes this by letting domains publish a canonical JSON profile at &#x2F;.well-known&#x2F;domain-profile.json that AI tools read directly.We&#x27;ve just completed the full tooling suite:PLATFORM INTEGRATIONS:
- WordPress: <a href="https:&#x2F;&#x2F;wordpress.org&#x2F;plugins&#x2F;ai-domain-data&#x2F;" rel="nofollow">https:&#x2F;&#x2F;wordpress.org&#x2F;plugins&#x2F;ai-domain-data&#x2F;</a>
- Jekyll: <a href="https:&#x2F;&#x2F;rubygems.org&#x2F;gems&#x2F;jekyll-ai-domain-data" rel="nofollow">https:&#x2F;&#x2F;rubygems.org&#x2F;gems&#x2F;jekyll-ai-domain-data</a>
- Next.js: npm install @ai-domain-data&#x2F;nextjs
- Cloudflare Worker: <a href="https:&#x2F;&#x2F;github.com&#x2F;ai-domain-data&#x2F;cloudflare-worker-ai-domain-data" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;ai-domain-data&#x2F;cloudflare-worker-ai-domai...</a>DEVELOPER TOOLS:
- CLI: npm install -g @ai-domain-data&#x2F;cli
- GitHub Action: <a href="https:&#x2F;&#x2F;github.com&#x2F;ai-domain-data&#x2F;ai-domain-data-validate-action" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;ai-domain-data&#x2F;ai-domain-data-validate-ac...</a>
- Resolver SDK: TypeScript&#x2F;Node.js for programmatic accessWEB TOOLS:
- Generator: <a href="https:&#x2F;&#x2F;ai-domain-data.org&#x2F;generator" rel="nofollow">https:&#x2F;&#x2F;ai-domain-data.org&#x2F;generator</a>
- Checker: <a href="https:&#x2F;&#x2F;ai-domain-data.org&#x2F;checker" rel="nofollow">https:&#x2F;&#x2F;ai-domain-data.org&#x2F;checker</a>The standard is intentionally minimal (name, description, website, contact, plus optional fields) and works with any domain type. All tooling is open source (MIT) and self-hosted by design.Spec: <a href="https:&#x2F;&#x2F;ai-domain-data.org&#x2F;spec&#x2F;v0.1" rel="nofollow">https:&#x2F;&#x2F;ai-domain-data.org&#x2F;spec&#x2F;v0.1</a>
GitHub: <a href="https:&#x2F;&#x2F;github.com&#x2F;ai-domain-data&#x2F;spec" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;ai-domain-data&#x2F;spec</a>What platforms should we support next?

Show HN: AI Domain Data Standard – Complete Tooling Suite

# This is a NextJS
NextJS is a **framework for ReactJS**.

Wait a second ... a "framework" for React? Isn't React itself already a framework for JavaScript?

Well ... first of all, React is a "library" for JavaScript. That seems to be important for some people.

Not for me, but still, there is a valid point: React already is a framework / library for JavaScript. So it's already an extra layer on top of JS.

## Getting Started

Create Next App:

```bash
npx create-next-app
# or
yarn create next-app
```

First, run the development server:

```bash
npm run dev
# or
yarn dev
```

Open [http://localhost:3000](http://localhost:3000) with your browser to see the result.

You can start editing the page by modifying `pages/index.js`. The page auto-updates as you edit the file.

[API routes](https://nextjs.org/docs/api-routes/introduction) can be accessed on [http://localhost:3000/api/hello](http://localhost:3000/api/hello). This endpoint can be edited in `pages/api/hello.js`.

The `pages/api` directory is mapped to `/api/*`. Files in this directory are treated as [API routes](https://nextjs.org/docs/api-routes/introduction) instead of React pages.

## Why would we then need NextJS?

Because NextJS makes building React apps easier - especially React apps that should have server-side rendering (though it does way more than just take care of that).

In this article, we'll dive into the core concepts and features NextJS has to offer:

- File-based Routing
- Built-in Page Pre-rendering
- Rich Data Fetching Capabilities
- Image Optimization
- Much More

## File-based Routing

![Create routes via your file + folder structure](nextjs-file-based-routing.png)

# File-based Routing In Action

![Create routes via your file + folder structure](nextjs-file-based-routing-in-action.png)

## Learn More

To learn more about Next.js, take a look at the following resources:

- [Next.js Documentation](https://nextjs.org/docs) - learn about Next.js features and API.
- [Learn Next.js](https://nextjs.org/learn) - an interactive Next.js tutorial.

You can check out [the Next.js GitHub repository](https://github.com/vercel/next.js/) - your feedback and contributions are welcome!

## Deploy on Vercel

The easiest way to deploy your Next.js app is to use the [Vercel Platform](https://vercel.com/new?utm_medium=default-template&filter=next.js&utm_source=create-next-app&utm_campaign=create-next-app-readme) from the creators of Next.js.

Check out our [Next.js deployment documentation](https://nextjs.org/docs/deployment) for more details.

... More content comming soon ...

NextJs News

News From: hn.algolia.com