Search results
12 resultsSecure Coding — OWASP Top 10 for Backend Engineers
Injection, broken auth, XSS, IDOR, and how to prevent each.
JWT Authentication — Implementation and Security Patterns
Access tokens, refresh tokens, rotation, revocation, and common mistakes.
REST API design principles we follow
Versioning, error formats, pagination, and auth patterns used across all Intersysop-built APIs.
CDN and Edge Caching Strategy
Origin offload, cache key design, purging, and choosing a CDN.
gRPC Service Design — Protocol Buffers and Production Patterns
Proto file design, streaming, deadlines, interceptors, and error handling.
GraphQL vs REST — When to Use Each
Comparing query flexibility, over-fetching, tooling, and operational complexity.
API Error Handling — Consistent Error Responses
Error format standards, HTTP status code usage, and client-friendly error design.
API Documentation Best Practices
What makes documentation useful, tooling, and keeping docs accurate.
Database Connection Pooling — Why It Matters and How to Configure It
Pool sizing, connection lifetime, and debugging pool exhaustion.
OAuth 2.0 and OIDC — Implementing Secure Third-Party Auth
Authorization code flow, PKCE, scopes, and integrating with identity providers.
Designing and Publishing API Client SDKs
Auto-generation vs handwritten, retry logic, versioning, and developer experience.
API Gateway — Responsibilities and Implementation Patterns
Authentication, rate limiting, routing, request aggregation, and when not to use a gateway.