Search for a command to run...
Articles tagged with #backend
In-memory limits, distributed Redis limits, token buckets, and the anti-bypass rules that keep an API alive under brute force, scraping, and honest traffic spikes. The login endpoint was taking 200 pa
From a raw ws echo server to a horizontally scaled Socket.IO deployment — with the heartbeat, backpressure, and reconnection logic that keeps real-time apps alive in production. A client came to me wi
Every middleware, header, and validation rule that has actually stopped an attack — from a 7-year production record that includes one very expensive pentest. The pentest report arrived on a Tuesday. E
The complete flow: password hashing, JWTs, refresh tokens, OAuth 2.0, and the hardening details most tutorials skip. Every Node.js authentication tutorial covers the happy path: hash the password with
