Chapter 6. Gita at the Door

What you'll learn in this chapter

• Explain the difference between authentication (who are you?) and authorisation (what may you do?)
• Add real sign-in to your app without building it yourself
• Turn on row-level security for every table and write least-privilege policies
• Check your own app against the ten most common vibe-coding security flaws
• Run a pre-launch security ritual you can repeat before every release

Inside

1. The evidence: why this chapter exists
2. Two stories you should know
3. Authentication: who are you?
4. Authorisation: what may you do?
5. Row-level security: a lock on every shelf
6. The top ten flaws in vibe-coded apps
7. The pre-launch security ritual
8. Lab: lock the doors of your own QueueLess
9. Prompts for securing your own app
10. What you've learned