A factual log of what shipped on JWTSecrets — content, fixes, features, and security work. Not a marketing timeline; entries are added when something real goes live.
Removed the fabricated Alex Morgan author page; added Swajan and Naima Tun Nissa profiles with verified Arcloops/FredoCloud roles, and reassigned all 53 blog posts (including drafts) across the three real bylines.
Published JWT revocation/blocklist, mobile Keychain/Keystore storage, clock-skew debugging, and ASP.NET Core JWT authentication guides (backdated publishedAt across Jun–Oct 2026), and linked ASP.NET into the language-implementation cluster.
Admin All/dashboard stats no longer mix 301-superseded redirected posts into the active list; redirected posts have their own filter tab. /changelog is included in the static sitemap routes.
Deepened three thin guides (JWT secret key definition, generation walkthrough, best-practices checklist) with real FAQ sections, added ES256/ECDSA and Ruby on Rails JWT guides, cross-linked the five-language implementation cluster, and reclassified 11 superseded blog posts that were still marked published despite redirecting elsewhere.
Fixed OG image URLs to always resolve to the www domain, set the sitemap to revalidate hourly, and merged unique JWT secret-size content into the canonical size guide.
Fixed blog and contact-form bugs and rewrote the About page.
Published new blog guides on running JWKS in production and debugging invalid JWT signatures.
Expanded /algorithms from stubs to full reference content and added build-time content-depth validation.
Rolled out phases 2-4 of the programmatic content system: expanded tool guide coverage, glossary depth, and environment configuration.