All ideasMore in Work

The AI audited my login setup and found a key bug no linter could

He gave the AI access to his Auth0 tenant to check his JWT validation. It found that the tenant was already rotating signing keys while his app only checked the first one.

How it works

  1. Gives the AI access to his Auth0 tenant
  2. The AI audits the JWT validation
  3. Finds the tenant rotates signing keys but the app only checks the first one

Why it’s worth knowing

The bug was not in his code alone. His tenant had moved on to rotating keys and his app had not kept up, and the AI spotted the mismatch.

Where it’s from

Summarized from a public post on bsky.app. See the original ↗

Upgraded prompt

A ready-to-use prompt for this idea, built from research on what makes AI agents do the job right: who the AI should be, the exact steps, and a check to make sure it was done the way you wanted.

1Who the AI should be
2The prompt, with the steps
3The check when it’s done
Upgraded prompts are coming soon.

Try next

Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.