Most SaaS founders discover they need rate limiting when a bot hits their endpoint 1,000 times in a minute -- here is how to add per-user and per-IP limits to your Next.js routes using your existing Neon database, no Redis or external service required.
Most founders think their Next.js SaaS is ready to launch until an exposed endpoint proves otherwise -- here is the 7-item checklist to run through before your first real user signs up, and how the boilerplate already handles most of it.
How to add TOTP-based two-factor authentication to a Next.js SaaS with Drizzle ORM -- generating secrets, rendering QR codes, validating codes at login, and issuing backup codes so users never get locked out.