My boss wanted to hide the web application source code from the browser dev tools, he wanted to force the clients to use an electron portal for the application and block the access from any other browser.

Request from a senior backend dev in a previous company:

Talking to the team thats responsible for the auth API's is such a pain. For this new API can we just not add any auth to it? Its only going to return details about who the email address belongs too. Like name, address, date of birth, car registration etc. No one will care about that, and it will be easier for mobile to integrate right?

This is what happens to overworked PMs.

Me: When users create accounts with social logins, they don’t have passwords in our database. If they try to enter an email and pw on the login form, what do you want the error message to say?

PM: Can we add a modal that says “Your account doesn’t have a password, set one now.” And have a password field?

Me: ☠️ That…would…allow…anyone…to…hijack…an…account…

PM: Right. Never mind.

I might have told this in other rants, but this thing (requested from the client) is one of the worst thing I've ever done.

So we were developing a website to find the stores of a certain brand across the country, specifically: Italy.
In Italy, a lot of towns have accents and apostrophes in their name.
Client managers wanted ALL DATA to be capitalized, including letters with accents, but the client management was using Windows and Windows doesn't simply let you enter capital letters with accents from the keyboard, so the client requested to make a procedure to turn every apostrophe into an accent, therefore a town named like "CA' DEL BOSCO" would be "CÀ DEL BOSCO" (which is wrong) as they just couldn't bother copy-pasting from Word.

An important thing to notice is that most Italian towns with apostrophes don't have accents and most towns with accents don't have apostrophes, and that specific routine couldn't figure out what to exactly, so we ended up having all the stuff messed up.

The feature was a total SHIT, but the client was extremely happy with it, so we didn't even bother arguing with that.

renaming the "password" field in a config file to "key"

Client: I need the push notification to have purple edges with blue background.

Me: I'm sorry. Apple does not have a support for such customization. What we can do is modify title, description and also add an overview image.

Client: No, you can make it purple edges with blue background. I saw it on dribble!

Me: *Logs out*.

Guest user by having all non authenticated sessions automatically assigned to user ID 0.

Let's just say.. it's not fun having all guests be able to view each others purchases and invoices.

So we ended up just always returning empty everywhere for user 0