GYGulshan Yadavinmrgulshanyadav.hashnode.dev·5h ago · 12 min readNode.js Security Essentials: The Checklist I Use in ProductionEvery middleware, header, and validation rule that has actually stopped an attack — from a 7-year production record that includes one very expensive pentest. The pentest report arrived on a Tuesday. E00
GYGulshan Yadavinmrgulshanyadav.hashnode.dev·16h ago · 10 min readHow to Get into Google AI Overviews — What Actually WorksNo speculation, no "write for AI" vagueness — the specific, measurable things that get a page cited in Google's AI answers. In March 2026, a B2B SaaS client in Bangalore watched organic clicks fall 3400
GYGulshan Yadavinmrgulshanyadav.hashnode.dev·1d ago · 12 min readImplementing Authentication in Node.js Apps (JWT, OAuth 2.0, bcrypt)The complete flow: password hashing, JWTs, refresh tokens, OAuth 2.0, and the hardening details most tutorials skip. Every Node.js authentication tutorial covers the happy path: hash the password with00
GYGulshan Yadavinmrgulshanyadav.hashnode.dev·1d ago · 10 min readAI Citations Explained: How to Get Cited in AI Search AnswersThe little numbered source under an AI answer is the new ranking position. This is how those sources get chosen — and how to make them point at you. A SaaS founder told me a story that sums up the who00
GYGulshan Yadavinmrgulshanyadav.hashnode.dev·2d ago · 11 min readFlutter Authentication with Firebase + JWT — The Full FlowFirebase owns identity on the device. Your backend owns trust. The JWT is the bridge between the two. Most Flutter authentication tutorials stop at the happy path: the user signs in with Firebase, you00