ZZyVOP·Oct 21Supabase in 2026: The Production Playbook for Grants, RLS, Keys, Connections, Realtime and CostA practical production guide to Supabase grants, row-level security, API keys, Postgres connections, Realtime, Edge Functions and pricing.32 min read·blog.zyvop.com
MMeghsham Kapure·Oct 18Validations & TransformationsHow controllers check and reshape incoming data before it reaches business logic, why the backend must never trust the frontend, and where each step fits in the MVC flow.5 min read·meghsham.hashnode.dev
MMeghsham Kapure·Oct 18Authentication and AuthorizationFrom wax seals to OAuth: how backends verify who a user is and control what they can do, using sessions, JWTs, API keys, OAuth/OIDC, and RBAC.14 min read·meghsham.hashnode.dev
ZZyVOP·Sep 25IDOR Vulnerabilities in NestJS: How to Build Ownership Guards That Actually Protect Your DataYour JWTs are working perfectly. Your database is leaking anyway — here's why authentication and authorization are not the same thing, and how to close the gap in NestJS + PostgreSQL15 min read·blog.zyvop.com
BBoluwatife Anwo·Dec 4, 2025Fortifying Backend: A Deep Dive into Hashing, CORS, CSRF, XSS, and DDoS Defense1. Introduction: The Stakes of Modern Backend Security. The difference between a successful business and a catastrophic failure in today's modern digital landscape often comes down to the integrity of its backend security. A data breach, like the inf...6 min read·backend-docs.hashnode.dev1
PPushkar Singh Kanwal·Jun 7, 2024The Role of Access and Refresh Tokens in Backend AuthenticationAccess and Refresh Tokens: Enhancing User Experience by Reducing Login Frequency2 min read·wn.hashnode.dev
