TLDR Dev · MISCELLANEOUS

AI SLOP SECURITY ENGINEERING: OKTA'S NEXTJS-0AUTH TROUBLES

joshua.hu5 min read

Summary from the TLDR Dev newsletter

Joshua Rogers reported a security vulnerability in Okta's auth0/nextjs-auth0 project and submitted a patch. However, the maintainer used AI to rebase the commit, resulting in incorrect attribution and the removal of Rogers' contribution history. The maintainer then used AI to apologize for the error and refused to correct the commit, despite Rogers' request.