FLIN

The language that replaces 47 technologies

A compiled, full-stack programming language built from scratch in Rust. One syntax for frontend, backend, database, and tooling. 3,200+ tests. 180 embedded UI components. Zero npm dependencies.

Rust 3,200+ tests 186K+ lines 280+ sessions

Building FLIN

Thales & Claude flin

#104 -- File Upload Support

How FLIN handles file uploads natively -- multipart parsing, size validation, type checking, and storage with save_file() -- no multer, no formidable, no configuration.

7 min Mar 26, 2026
flinfile-uploadmultipartstorage
Thales & Claude flin

#105 -- Response Helpers and Status Codes

How FLIN's response system turns return values into HTTP responses automatically -- JSON serialization, status codes, redirect helpers, and error formatting without boilerplate.

8 min Mar 26, 2026
flinresponsehttpstatus-codes
Thales & Claude flin

#106 -- Security by Design: OWASP Top 10 in the Language

How FLIN addresses all OWASP Top 10 vulnerabilities at the language level -- not through libraries, not through configuration, but through design decisions that make insecure code impossible to write.

8 min Mar 26, 2026
flinsecurityowaspdesign
Thales & Claude flin

#107 -- Argon2 Password Hashing Built Into FLIN

How FLIN ships Argon2id password hashing as a built-in function -- no bcrypt debates, no configuration, just hash_password() and verify_password() with secure defaults.

8 min Mar 26, 2026
flinargon2passwordhashing +1
Thales & Claude flin

#108 -- JWT Authentication in 3 Lines of FLIN

How FLIN's built-in JWT functions -- create_token, verify_token, refresh_token -- reduce token-based authentication to three lines of code with secure defaults.

8 min Mar 26, 2026
flinjwtauthenticationtokens
Thales & Claude flin

#125 -- Search Analytics and Result Caching

How FLIN tracks search queries, measures result quality, and caches frequently accessed results -- turning search from a stateless operation into a learning, optimizing system.

8 min Mar 26, 2026
flinanalyticscachingsearch +1
Thales & Claude flin

#109 -- Rate Limiting and Security Headers

How FLIN provides built-in rate limiting with sliding windows and automatic security headers on every response -- protecting applications against abuse, XSS, clickjacking, and MIME sniffing by default.

7 min Mar 26, 2026
flinrate-limitingheaderssecurity
Thales & Claude flin

#110 -- Two-Factor Authentication (TOTP)

How FLIN implements TOTP two-factor authentication as a built-in feature -- secret generation, QR codes, verification, and backup codes in four function calls.

8 min Mar 26, 2026
flin2fatotpauthentication
Thales & Claude flin

#111 -- OAuth2 and Social Authentication

How FLIN provides built-in OAuth2 functions for Google, GitHub, Discord, Apple, LinkedIn, and Telegram -- PKCE flows, state validation, and user creation in a standardized pattern.

7 min Mar 26, 2026
flinoauth2social-authgoogle +1
Thales & Claude flin

#112 -- WhatsApp OTP Authentication for Africa

How FLIN provides built-in WhatsApp OTP authentication -- the phone-first auth method designed for African markets where WhatsApp is the primary communication platform.

8 min Mar 26, 2026
flinwhatsappotpafrica +1
Thales & Claude flin

#113 -- Request Body Validators

How FLIN's validate blocks enforce type safety, constraints, and business rules on incoming request data -- declarative validation that runs before your handler code and returns structured error responses.

8 min Mar 26, 2026
flinvalidatorsrequestvalidation
Thales & Claude flin

#114 -- 75 Security Tests: How We Verified Everything

How we wrote 75 security tests for FLIN covering password hashing, JWT tokens, rate limiting, guards, CSRF, input validation, and session management -- ensuring every security feature works correctly.

7 min Mar 26, 2026
flinsecuritytestingverification