tmailrWriting · For developers
For developers
Testing email properly, in CI and out of it. 7 articles.
31 JulTesting signup emails in CI without a real mailboxSleep-and-hope is why your email tests are flaky. Here is the shape that is not.2 min31 JulRate limiting on the wrong axis is worse than nonePer-IP limits punish shared offices and mobile networks while doing nothing to an attacker who rotates addresses for pennies.2 min31 JulWhen two safety checks hide each otherA debugging story: two independent gates, each refusing for its own reason, and a day spent proving the wrong one was responsible.2 min31 JulThe feature works. Nobody can tell.Three times in one product we built a correct mechanism and forgot to tell anyone it had fired.2 min30 JulWebhook signatures, done properlyA shared secret in a header is not a signature. Here is what to send, what to check, and the two mistakes almost everyone makes on the receiving end.2 min18 JulDesigning a signup form that does not leak who is registered"That email is already taken" is a feature request and a privacy hole, and you usually have to pick.2 min16 JulThe test address in your CI belongs to somebodytest@example.com is reserved. test@gmail.com is a real person, and your pipeline has been mailing them for months.2 min
Other topics