Search results
12 resultsSecure Coding — OWASP Top 10 for Backend Engineers
Injection, broken auth, XSS, IDOR, and how to prevent each.
REST API design principles we follow
Versioning, error formats, pagination, and auth patterns used across all Intersysop-built APIs.
JWT Authentication — Implementation and Security Patterns
Access tokens, refresh tokens, rotation, revocation, and common mistakes.
CDN and Edge Caching Strategy
Origin offload, cache key design, purging, and choosing a CDN.
gRPC Service Design — Protocol Buffers and Production Patterns
Proto file design, streaming, deadlines, interceptors, and error handling.
GraphQL vs REST — When to Use Each
Comparing query flexibility, over-fetching, tooling, and operational complexity.
API Error Handling — Consistent Error Responses
Error format standards, HTTP status code usage, and client-friendly error design.
API Documentation Best Practices
What makes documentation useful, tooling, and keeping docs accurate.
Database Connection Pooling — Why It Matters and How to Configure It
Pool sizing, connection lifetime, and debugging pool exhaustion.
OAuth 2.0 and OIDC — Implementing Secure Third-Party Auth
Authorization code flow, PKCE, scopes, and integrating with identity providers.
Designing and Publishing API Client SDKs
Auto-generation vs handwritten, retry logic, versioning, and developer experience.
API Gateway — Responsibilities and Implementation Patterns
Authentication, rate limiting, routing, request aggregation, and when not to use a gateway.