Making Software

Auth0
  • 0.0 (0)
  • Technology
  • Updated Monthly

Making Software is a podcast where engineers from across the tech world, backend, frontend, security, open source, and more share how real software gets built. Each episode features an informal conversation full of lessons, stories, and technical insight from people who design and ship the systems we all rely on. The show goes beyond tools and frameworks to explore the thinking, trade-offs, and creativity behind great engineering, offering listeners an authentic look into the craft of building better software.

Episodes

  1. 6d ago

    Episode 9: Inside the Protocol Securing AI Agents at Work

    Every time you tell an AI agent to do something and it pops open a browser asking for your permission, you're probably clicking yes without reading it. Miguel Pedregosa is a Senior Software Engineer on the Protocols team at Auth0 (Okta). His team owns the implementation of identity standards inside Auth0 like OAuth, OIDC, SAML, WS-Federation. The infrastructure every developer integrating with Auth0 relies on without thinking about it. Before Auth0, Miguel worked on malvertising detection, tracing malware hidden inside ad traffic. The through line in his career: security-intensive environments where getting it wrong has real consequences. In this episode we talk about what it's like to build infrastructure that millions of developers depend on without knowing it, how Cross-App Access and Enterprise-Managed Auth for MCP came to exist, and what it takes to implement an IETF standard that's still being drafted while industry adoption is already happening. We also get into the difference between what enterprises and startups actually need from identity — and why Miguel thinks basic threat modeling matters even if you never want to touch an RFC. What You'll Learn: Why AI agent auth popups are a security flaw, not just a UX annoyance How Cross-App Access uses an existing enterprise identity provider to let agents authenticate without opening a browserWhat the IDJAG (Identity JWT Assertion Grant) is and why it's the central artifact of the protocolWhat it's like to implement an IETF standard while it's still being drafted — and how Auth0's team fed back into the specThe difference between what enterprises and startups need from identity: legacy system integration at scale- Why basic threat modeling is the minimum for anyone shipping AI agents, and the three questions to start withResources: Miguel on LinkedIn: https://www.linkedin.com/in/miguel-pedregosa/Cross-App Access blog post: https://auth0.com/blog/setting-up-testing-cross-app-access-auth0/Cross-App Access protocol: https://oauth.net/cross-app-access/IDJAG (Identity JWT Assertion Grant) spec: https://datatracker.ietf.org/doc/html/draft-ietf-oauth-identity-assertion-authz-grantIdentity and Authorization Chaining Across Domains: https://datatracker.ietf.org/doc/draft-ietf-oauth-identity-chaining/

  2. Aug 26

    Episode 8: Build It to Understand It: How to Learn, Teach, and Vibe Code with AI

    How do you truly understand complex tech topics in the era of AI? In this episode of Making Software, Jess (Senior Developer Advocate) shares her core philosophy: "Build it to understand it." We dive deep into the creative process behind teaching technical concepts, the reality of "vibe coding," and how to manage a multi-tool AI stack (Claude, Gemini, Cursor, Grok) without getting overwhelmed. Learning Philosophy: Why building hands-on projects is the ultimate way to master and teach new tech. Vibe Coding vs. Security: How to leverage AI code generation while keeping your app sound with tests, logs, and security prompts. Multi-Model AI Workflows: How to orchestrate Gemini, Claude, Cursor, and Grok across daily dev tasks. System Postmortems: Using AI to generate postmortems and write rule guidelines after a system outage. Overcoming AI Overwhelm: How setting real-world project constraints drives focused learning.

  3. Jul 29

    Episode 7: Developers vs Builders: How AI Is Changing Who We Build For

    Who are we actually building for anymore, and does the answer change everything about how we teach, learn, and ship software? James Quick is a Developer Educator at Cloudflare with 13 years in developer relations, starting as a technical evangelist at Microsoft before most people knew that was a job. He hasn't written a line of code in 8 months. In that time he has built more than ever: a Frame.io clone for his team, a QuickBooks replacement, a Descript alternative, and Dropcast, a tool that generates custom podcasts from links so he can keep learning while commuting. In this episode we talk about how the line between developer and builder is dissolving, what that means for the people creating educational content, how AI completely flipped James's take on build vs buy, and how companies like Cloudflare are thinking about being part of the conversation in a world where LLMs make the recommendations. If you are a developer, a builder, or someone creating content for either, this one is for you. What You'll Learn: Why the audience for developer content has shifted from developers to builders, and what that forces educators to changeHow James builds more than ever without writing a line of code, and why he does not miss itWhy his opinion on build vs buy completely flipped, with real tools he built to prove itWhat AEO (Answer Engine Optimization) is and why it matters more than SEO for developer tools right nowHow Cloudflare thinks about being recommended by AI agents when builders never ask which platform to useWhy every app James builds now needs an MCP server, and how that changes the build decision- The one piece of advice James has given for 13 years that has not changed even with AI

  4. Jun 24

    Episode 6: Building Rails Infrastructure: The Story Behind Solid Queue | Open Source & Community

    Is Redis still mandatory for scaling background workflows, or can modern database disks handle millions of jobs per day? In this episode of Making Software, Rosa Gutierrez (Principal Programmer at 37 Signals) breaks down the creation of Solid Queue: the default background job adapter shipping with Rails 8. We dive deep into the technical decisions behind moving away from memory stores, the reality of maintaining infrastructure used by millions, and how AI agents are changing the culture of open-source contributions. What You'll Learn- The Death of Redis Multi-Gem Noise: Why Solid Queue was built to streamline a complex seven-gem setup in production. - Database vs. In-Memory: The architectural trade-offs, performance calculations, and transactional integrity advantages of database-backed queues. - The Human Tax of Open Source: The realities of maintaining critical framework code, handling community burnout, and guarding against repository noise. - The Rise of AI Agents on GitHub: Why LLMs are writing a massive wave of modern issues and PRs, and why they make surprisingly polite contributors. Solid-queue Repo: https://github.com/rails/solid_queueChapter Markers:00:00 - Introduction to Rosa Gutierrez & Making Software01:56 - Meet Rosa: 9+ Years at 37 Signals02:58 - The Ruby Bubble and Its Modern Comeback04:35 - Why AI Agents Love Ruby on Rails05:44 - The European Ruby Triathlon Infrastructure08:03 - The Origin Story of Solid Queue & Solid Cache10:48 - Moving Away From Memory Stores to Fast Relational Disks13:06 - Replacing 7 Gems and Testing Internally at HEY14:28 - Database Scalability Hardships & Transactional Integrity16:58 - Simplifying API Descriptors & Documentation for Rails 820:07 - Intentional Code Readability vs Legacy Gem Complexities22:09 - The Reality Shift of Mainstream Open Source Maintenance26:10 - GitHub Entitlement vs Polite AI Agents28:15 - Being a Founding member at the Rails Foundation30:37 - Organizing Rails World & Programming Committee Selection39:45 - Meticulous Advice for First-Time Open Source Contributors42:17 - Wrap-up

  5. May 20

    Episode 5: Understanding People to Build Better Software | AI Enablement & Productivity

    In today's episode, we explore the intersection of human psychology and engineering. Our guest, Dennis Henry, a Productivity Architect at Okta, shares how his Master’s degree in human factors—the study of how humans interact with systems and why they fail—has transformed his approach to building internal tools. In this episode, we discuss: The Myth of Human Error: Why "failure" in software is rarely about one person and more about the processes surrounding them. AI Enablement at Scale: How Dennis built a secure, multi-model AI gateway at Okta that allows employees to use Gemini, Claude, GPT, and more safely. Environmental Impact: The innovative "nudge" tool that shows developers the carbon footprint of their AI prompts. Redefining Productivity: Why vanity metrics like lines of code are "terrible" and why qualitative sentiment is the true measure of success. Servant Leadership: Why the best thing a leader can do today is simply talk to their people and ask, "What sucks about your job?"

  6. Apr 22

    Episode 4: Scaling AI Infrastructure: From Backend Engineer to Platform & Infra

    In this episode of Making Software, Carla sits down with Matteo Ferrando who does Platform and Infrastructure at Fal.ai, to explore the complex world of infrastructure and platform engineering. Matteo shares his journey from backend engineering to architecting a leading generative media platform. The conversation dives deep into: The "Two-Way Door" Framework: How to decide between building a quick MVP and a long-term scalable solution.Latency-Sensitive AI: The infrastructure challenges of serving audio and video models with millisecond precision.Backend vs. Infra: Matteo’s "controversial" take on what backend engineering really means in a startup environment.The Future of Coding: Why computer science fundamentals are more important than ever in the age of AI-assisted development.Whether you're an engineer looking to transition into platform roles or curious about the "how" behind generative AI platforms, this episode is packed with practical architectural insights.

    Episode 4: Scaling AI Infrastructure: From Backend Engineer to Platform & Infra

  7. Mar 25

    Episode 3: Security By Design in the Age of AI with Bobby Tiernay

    Is "Vibe Coding" a breakthrough for productivity or a security nightmare? In this episode of Making Software, Carla talks with Bobby Tiernay, Principal Architect at Auth0, about the messy, exciting, and risky reality of building with AI. Bobby breaks down the evolution of "Vibe Coding"—using AI to prototype via intuition—and why the industry must shift toward Spec Coding to ensure long-term stability and security. In this episode, we discuss: The Vibe Coding Phenomenon: Why prototyping with AI feels like magic, but lacks the rigor of enterprise software.Security for AI Agents: How to avoid "YOLO mode" and implement sandboxing to protect your network and data.The Model Context Protocol (MCP): Using standard protocols to bridge the gap between AI and your local environment safely.The Future of the Engineer: Why being a "Master Communicator" is becoming more important than being a master of syntax.Building the "Right Thing": How AI can help reverse-engineer requirements and create better specifications.

    Episode 3: Security By Design in the Age of AI with Bobby Tiernay

  8. Feb 25

    Episode 2: Build Products for Other Engineers | SDKs, APIs & Open Source with Raghd Hamzeh

    Building products for other engineers is a unique challenge. Unlike consumer apps, developer tools (SDKs, APIs, and Open Source) require a deep focus on Developer Experience (DX), idiomatic code, and long-term maintenance. In this episode of Making Software, Raghd Hamzeh (Senior Software Engineer at Okta and OpenFGA maintainer) breaks down how to balance community requests with platform health. What you’ll learn in this video: The Shift in Mindset: How your engineering process changes when your "users" are also engineers.Consistency vs. Idiomatic Code: Should a Ruby SDK look like a Go SDK, or should it feel native to the language?Handling Breaking Changes: Why saying "no" to a feature request can actually save your platform’s health.The Power of Automation: How to manage multiple languages and open-source contributions without losing your mind. Check Making Software's Website Learn more about OpenFGA

    Episode 2: Build Products for Other Engineers | SDKs, APIs & Open Source with Raghd Hamzeh

  9. Jan 28

    Episode 1 - Engineering the Experience with Developer Relations with Sam Bellen

    In this episode, Carla sits down with Sam Bellen (Principal Developer Advocate) to discuss the world of Developer Relations (DevRel). Sam shares his unique journey from writing day-to-day code to advocating for developers globally, and why he believes authenticity is the most powerful tool in any engineer's toolkit. In this episode, we discuss why DevRel is a bridge between engineering, product, and the community, how to help product teams prioritize developer feedback and much more! Check Making Software's Website

    Episode 1 - Engineering the Experience with Developer Relations with Sam Bellen
  • 9 Episodes

About

Making Software is a podcast where engineers from across the tech world, backend, frontend, security, open source, and more share how real software gets built. Each episode features an informal conversation full of lessons, stories, and technical insight from people who design and ship the systems we all rely on. The show goes beyond tools and frameworks to explore the thinking, trade-offs, and creativity behind great engineering, offering listeners an authentic look into the craft of building better software.

Information

  • Creator
    Auth0
  • Years Active
    2026
  • Episodes
    9
  • Rating
    Clean
  • Copyright
    © Auth0
  • Show Website
    Making Software