Blog — page 8
Technical writing on Web3, AI, Bitcoin, and building software. Written by Uvin Vindula.
150 articles
Next.js Middleware Patterns for Production Applications
Battle-tested Next.js middleware patterns I use on every production app — authentication redirects, rate limiting at the edge, geo-based routing, bot detection, A/B testing, and a complete middleware.ts template you can drop into any project.
Working as a Remote Developer from Sri Lanka with Global Clients
A practical guide to working as a remote developer from Sri Lanka with clients in the UK, USA, Canada, and Europe. Uvin Vindula shares real numbers on pricing ($8K-$80K projects), time zone management across IST and GMT, payment solutions that actually work for Sri Lankan developers, and the common mistakes that keep talented developers undercharging. Based on years of experience running Terra Labz and building production software for international clients from Colombo and London.
Access Control in Smart Contracts: Patterns That Prevent Exploits
A security auditor's guide to smart contract access control — from simple Ownable to role-based AccessControl, multi-sig patterns, timelocks, and emergency pauses. Includes real anonymized audit findings, vulnerable vs fixed code, and Foundry tests that catch access control bugs before attackers do.
Supabase Row Level Security: The Patterns That Actually Work
A battle-tested guide to Supabase Row Level Security policies — SELECT, INSERT, UPDATE, DELETE patterns, auth-based policies, role-based access, multi-tenant RLS, performance tuning, and the mistakes I have made so you do not have to.
Authentication in Next.js with Supabase: Production Patterns
Production authentication patterns I use in every Next.js project with Supabase Auth. From email/password and OAuth flows to middleware-based session management, protected routes on both server and client, role-based access control, and the auth bugs that cost me hours. Real patterns from uvin.lk and EuroParts Lanka that handle expired sessions, OAuth callback races, and edge cases most tutorials skip.
On-Chain SVG NFTs: Building Dynamic Metadata That Lives on the Blockchain
A hands-on guide to building on-chain SVG NFTs with dynamic metadata that evolves based on blockchain state. Covers Solidity SVG generation, base64 encoding for tokenURI, gas optimization patterns, and comparison with IPFS-based approaches.
How to Build an MVP That Actually Works: A Developer's Guide
A practical guide to building MVPs that validate your idea and attract real users — with real budgets, timelines, and examples from building products like GemStore.lk and EuroParts Lanka. Stop overbuilding. Start shipping.
Streaming and Suspense in Next.js: Patterns for Fast Page Loads
Battle-tested streaming and Suspense patterns from production Next.js apps. Learn how to get LCP under 1.5 seconds by streaming expensive data fetches while showing an instant shell. Real examples from EuroParts Lanka and FreshMart.
Supabase Authentication: The Complete Guide for Next.js Apps
A hands-on guide to implementing Supabase Auth in Next.js 16 apps — email/password flows, OAuth providers, server-side middleware, Row Level Security, and the production gotchas I learned building uvin.lk, EuroParts Lanka, and FreshMart.
DeFi Lending Protocols: How Aave and Compound Actually Work
A deep dive into DeFi lending protocols — utilization rates, interest rate curves, health factors, liquidation mechanics, flash loans, and a Solidity lending pool implementation. How Aave V3 and Compound V3 actually work under the hood.
Zod Validation in Next.js: From Form Inputs to API Responses
A complete guide to using Zod v4 for runtime validation in Next.js applications. Covers form validation with Server Actions, API route validation, environment variable safety, external API response parsing, React Hook Form integration, custom error messages, and battle-tested validation patterns from production codebases.
The Graph Protocol: Indexing Blockchain Data for dApps
A practical guide to indexing on-chain data with The Graph Protocol — from subgraph definition and schema design to event handlers, deployment on Subgraph Studio, and querying with GraphQL. Covers hosted vs decentralized network, performance optimization, and real patterns from production DeFi and NFT indexing.