Angular on Omid Farhang

Modern Auth Patterns for Angular Frontends (Beyond “Just Add JWT”)

Fri, 31 Jul 2026 00:40:00 +0330

Stop storing JWTs in localStorage. Use OIDC with a BFF or reverse proxy, short-lived server-side tokens, HttpOnly cookies, and Angular interceptors and guards that do not pretend to be your security boundary.

Why Client-Side Frameworks Need Security Updates

Wed, 29 Jul 2026 00:41:00 +0330

Browser frameworks still own sanitization, request protection, and SSR isolation. Three recent Angular CVEs show why framework patches are part of every client-side app’s security boundary.

Securing Angular PWAs in 2026

Wed, 22 Jul 2026 00:42:00 +0330

Security for Angular Progressive Web Apps: HTTPS and service worker scope, cache strategies that do not leak auth-dependent data, and offline sessions without raising XSS or CSRF risk.

Dependency Risk, SBOMs, and Automated Security for Angular

Sat, 18 Jul 2026 00:45:00 +0330

Build an SBOM and CI security pipeline for Angular monorepos: npm audit, ng update --dry-run, fail on high-severity CVEs, Dependabot/Snyk, and post summaries to Slack or Mastodon.

Content Security Policy (CSP) and Angular: Practical Patterns

Wed, 15 Jul 2026 00:50:00 +0330

Ship CSP for Angular without breaking the build: report-only first, nonces via autoCsp or ngCspNonce, nginx/Apache/Cloudflare headers, and a small scanner for inline handlers, eval, and other footguns.

TypeScript 7 Is Here: Fast, Exciting, and Worth Watching

Fri, 10 Jul 2026 02:03:30 +0330

TypeScript 7's native port delivers dramatic build-time speedups, but editor plugins, framework tooling, and monorepo workflows are catching up at different speeds. A practical read for teams deciding when to adopt.

Local AI on Manjaro: Ollama, Aider, and Cline Without Another Subscription

Tue, 30 Jun 2026 01:14:50 +0330

A follow-up to the split Cursor workflow: install Ollama on Manjaro with CUDA, pull coding models, wire up Aider and Cline for scoped local work — with honest limits on tool reliability, privacy, and when to fall back to cloud models.

How to Stretch Cursor Pro Further: A Split AI Workflow

Mon, 29 Jun 2026 10:00:00 +0330

Cursor Pro is best when it edits code, not when it thinks out loud. A practical split workflow — Perplexity for current research, ChatGPT for planning, Claude for review, Ollama for cheap tasks, and Cursor for multi-file execution — plus what actually counts against your quota.

How to Build a Frontend Testing Strategy That Actually Scales

Tue, 09 Jun 2026 01:50:00 +0330

A practical frontend testing strategy for large teams: how to choose between unit, integration, component, and end-to-end tests in a real Angular codebase without creating slow, fragile coverage.

Why Your Frontend Tests Flake and How to Fix Them for Good

Mon, 08 Jun 2026 02:00:00 +0330

A practical guide to reducing flaky frontend tests by improving isolation, waiting strategies, deterministic fixtures, test data, clocks, network control, and CI diagnostics.

Stop Modeling Angular Screens with Five Booleans

Tue, 02 Jun 2026 01:15:00 +0330

Most Angular UI bugs come from screens modeled as scattered flags. Replace loading, error, empty, and ready booleans with one explicit state model your templates and reviewers can trust.

Angular Is Quietly Becoming AI-Tool Friendly: What MCP Server Support Changes for Real Teams

Wed, 27 May 2026 02:48:00 +0330

Angular's MCP Server tooling is not just an AI demo. It changes how teams can connect framework knowledge, local code, and coding assistants without losing their conventions.

The Hidden Cost of Nice Syntax: When Angular's New Template Features Make Code Harder to Reason About

Tue, 26 May 2026 02:48:00 +0330

Angular's newer template syntax is powerful, but spread/rest, arrow functions, multi-case switches, and richer control flow need team rules before clever templates become maintenance debt.

Signal Forms Aren't Just a Forms API Update: They Change How You Model UI State

Mon, 25 May 2026 02:48:00 +0330

Signal Forms push Angular forms toward explicit state modeling, where validation, submission, async work, and derived UI state live in the same reactive graph.

Migrating from React to Angular: A 'Ship of Theseus' Case Study in Production

Thu, 01 Jan 2026 02:25:59 +0330

A detailed look at why and how we migrated a core legacy React application to Angular in a high-stakes FinTech environment using the Strangler Fig pattern.

Angular Signals and Control Theory: A New Reactivity Model

Wed, 24 Dec 2025 02:20:31 +0330

Explore the connection between Control Theory and Angular's new Signals-based reactivity model for better frontend performance.

ViewChild Angular: Complete Guide to @ViewChild and @ContentChild

Sun, 08 Sep 2024 12:56:55 +0330

ViewChild Angular guide with @ViewChild and @ContentChild examples, a comparison table vs ContentChild and signal queries, and best practices for DOM access.

Migrating from REST to GraphQL: A Step-by-Step Guide for Express.js and Angular

Wed, 07 Aug 2024 02:20:56 +0330

In today’s rapidly evolving web development landscape, GraphQL has emerged as a powerful alternative to traditional REST APIs. This blog post will guide you through the process of migrating your Express.js backend and Angular frontend from REST to GraphQL, unlocking the benefits of a more flexible and efficient API architecture.

1. Introduction

REST (Representational State Transfer) has been the go-to architectural style for building web APIs for many years. However, GraphQL, developed by Facebook, offers several advantages:

Creating Dynamic Music Visualizations with Angular and the Web Audio API

Sat, 13 Jul 2024 17:43:38 +0330

Music visualization has always been a fascinating way to enhance the auditory experience, offering a visual representation of sound that can be both mesmerizing and informative. With the power of modern web technologies like Angular and the Web Audio API, creating dynamic music visualizations is more accessible than ever. This blog post will guide you through the process of building an engaging music visualization application using Angular and the Web Audio API.

OpenTelemetry in Angular: Distributed Tracing Setup Guide

Fri, 28 Jun 2024 12:31:41 +0330

Step-by-step OpenTelemetry Angular tutorial: instrument an Angular app for distributed tracing, export spans to Jaeger, and monitor microservices performance.