Node.js Email Verification Without the User-List Leak
Most Node.js email verification tutorials tell attackers who your users are. Give every address the same answer in the same time. Fix your signup today.
-
-
6 Auth Security Checks to Run on Your App in 20 Minutes
Six auth security checks that catch token, cookie, logout, and rate limit bugs in about 20 minutes. Run them on your app today.
-
Simple Software Architecture Lessons for New Developers
Simple software architecture starts with saying no. Jerry Nixon’s NDC talk explains what every box does. Learn which ones to skip.
-
Role-Based Access Control in Express and Prisma
Most Node tutorials store the role on the user. Fix role-based access control with project memberships, and make missing checks fail the build.
-
JWT Logout Does Nothing: Refresh Token Rotation Fixes It
Most JWT logouts revoke nothing. Learn refresh token rotation, reuse detection, and the race condition that logs users out. Fix your logout today.
-
Zod with Express: Stop Writing your Types Twice
Zod with Express replaces hand-written checks and duplicate interfaces with one schema that validates and types your request body. Start with one route.
-
Testcontainers for Postgres: Make Your Tests Actually Fail
A suite of isolation tests that never fail is not a suite. Here is how I moved database tests onto Testcontainers for Postgres so breaking a rule breaks the build.
-
Building a Background Job Pipeline That Holds Up
Retries turned an 800-person import into 975 rows. Build a background job pipeline with idempotent writes, backoff, and a DLQ — fix your queue today.
-
Postgres Row Level Security for Multi-Tenant APIs
A missing tenant filter returns a 200 with the wrong person’s data. Here’s how I moved the rule out of my code and into Postgres.
-
Postgres 19 Property Graph Queries Explained for Developers
Postgres 19 property graph queries bring Cypher-style graph patterns to your SQL tables. Learn the wins, the limits, and when to use them.
