Buglyst Blog
Learn to debug under pressure.
Playbooks for fast pattern recognition, guides for the full investigation, and articles for the engineering judgment around the edges.
17 playbooks · 509 guides · 95 articles · 12 linked practice labs ·skip to practice
Fast pattern recognition for the production failures engineers see most often.
0 playbooks in Security & Auth
No playbooks found
Nothing matches “”. Try a broader term.
Structured investigations for the failure modes engineers meet in real systems.
JWT token invalid after deployment: how to debug it
JWTs work locally and in staging, but after a production deploy every token is rejected. The secret, algorithm, or clock changed.
Session cookie not working after deployment: how to debug it
Users were logged in. You deploy. Everyone is logged out. The session cookie is not being sent, not being recognised, or being set with wrong attributes after the new deployment.
OAuth callback URL mismatch: how to debug OAuth redirect errors
OAuth login fails with 'redirect_uri_mismatch' after deployment. The callback URL in the request does not exactly match what is registered with the OAuth provider.
SSL certificate error after deployment: how to debug TLS issues
Your site was working with HTTPS. After a deployment, browsers show SSL errors. The certificate expired, was not renewed, or the domain changed.
Tenant cache leak: how to debug cross-tenant data exposure through caching
A user from Tenant A sees data from Tenant B because the cache key does not include the tenant identifier. The cache is leaking data across tenants.
Debugging 'JWT Invalid Signature' Failures in Production
JWT invalid signature errors often stem from key mismatches, encoding quirks, or unnoticed library pitfalls. This guide details concrete, real-world debugging steps.
Long-form thinking on debugging habits, observability, and the systems around the bug.