Backend
Rate Limiting: Why, What, and How
Why every public API needs rate limiting, the common algorithms and their tradeoffs, and how to implement it without reinventing the wheel.
Backend
JWT, Sessions, and OAuth2: What Each One Is Actually For
The differences between JWTs, server-side sessions, and OAuth2, and how to choose the right mechanism for the authentication problem you are actually solving.
Backend
Server Architecture Patterns: Monolith, Modular, Service-Oriented
Three architectural styles, their actual tradeoffs, and how to choose between them without falling into the microservices trap.
Backend
Authentication vs Authorization - and How to Implement Both
Two concepts that are constantly confused and constantly misimplemented. Here is what each means and how to get both right.