Building an auth API that behaves like a real product

Short summary

Tutorial building a production-grade NestJS auth API with email verification, refresh tokens, and role-based access. Author documents a real bug where logout failed because the cookie clear operation used a different name than the set operation; fix requires exact name and attribute matching. Includes serverless deployment lessons and emphasis on using constants to prevent configuration drift.

• •Complete NestJS auth tutorial covering registration, email verification, login/logout, password reset, and role-based routes
• •Real bug story: logout failed silently because cookie clear used wrong name; solution requires matching exact names and attributes
• •Key lessons: serverless deploys fail early on missing env config; use shared constants for cookie names to prevent drift

Generated with AI, which can make mistakes.