---
title: "#backendsecurity articles | Hashnode"
description: "Explore 5 articles tagged #backendsecurity on Hashnode. Tutorials, guides, and how-tos from the community."
url: "https://hashnode.com/tag/backendsecurity"
---

Tag

# #backendsecurity

5 posts · 0 followers

[ZyVOP](https://hashnode.com/@zyvop) · [Oct 21](https://hashnode.com/posts/supabase-in-2026-the-production-playbook-for-grants-rls-keys-connections-realtime-and-cost-m6rnj/6ad878d1f2d6dbbfdd47b474)

### [Supabase in 2026: The Production Playbook for Grants, RLS, Keys, Connections, Realtime and Cost](https://blog.zyvop.com/supabase-in-2026-the-production-playbook-for-grants-rls-keys-connections-realtime-and-cost-m6rnj?utm_source=hashnode&utm_medium=feed)

A practical production guide to Supabase grants, row-level security, API keys, Postgres connections, Realtime, Edge Functions and pricing.

32 min read · [blog.zyvop.com](https://blog.zyvop.com/supabase-in-2026-the-production-playbook-for-grants-rls-keys-connections-realtime-and-cost-m6rnj?utm_source=hashnode&utm_medium=feed)

[Meghsham Kapure](https://hashnode.com/@meghsham) · [Oct 18](https://hashnode.com/posts/validations-transformations/6ad52e0b9f2208937ad7bb9e)

### [Validations & Transformations](https://meghsham.hashnode.dev/validations-transformations?utm_source=hashnode&utm_medium=feed)

How controllers check and reshape incoming data before it reaches business logic, why the backend must never trust the frontend, and where each step fits in the MVC flow.

5 min read · [meghsham.hashnode.dev](https://meghsham.hashnode.dev/validations-transformations?utm_source=hashnode&utm_medium=feed)

[Meghsham Kapure](https://hashnode.com/@meghsham) · [Oct 18](https://hashnode.com/posts/authentication-and-authorization-guide/6ad52a9ac81942695a4ce287)

### [Authentication and Authorization](https://meghsham.hashnode.dev/authentication-and-authorization-guide?utm_source=hashnode&utm_medium=feed)

From wax seals to OAuth: how backends verify who a user is and control what they can do, using sessions, JWTs, API keys, OAuth/OIDC, and RBAC.

14 min read · [meghsham.hashnode.dev](https://meghsham.hashnode.dev/authentication-and-authorization-guide?utm_source=hashnode&utm_medium=feed)

[ZyVOP](https://hashnode.com/@zyvop) · [Sep 25](https://hashnode.com/posts/idor-vulnerabilities-in-nestjs-how-to-build-ownership-guards-that-actually-protect-your-data/6ab6a7119160c4403d21a3ff)

### [IDOR Vulnerabilities in NestJS: How to Build Ownership Guards That Actually Protect Your Data](https://blog.zyvop.com/idor-vulnerabilities-in-nestjs-how-to-build-ownership-guards-that-actually-protect-your-data?utm_source=hashnode&utm_medium=feed)

Your JWTs are working perfectly. Your database is leaking anyway — here's why authentication and authorization are not the same thing, and how to close the gap in NestJS + PostgreSQL

15 min read · [blog.zyvop.com](https://blog.zyvop.com/idor-vulnerabilities-in-nestjs-how-to-build-ownership-guards-that-actually-protect-your-data?utm_source=hashnode&utm_medium=feed)

[Md. Amirul Islam](https://hashnode.com/@amir006) · [Jan 4](https://hashnode.com/posts/backend-security-part-2/695a7708b625c3b7c155b334)

### [Backend Security (Part-2)](https://ainahid.hashnode.dev/backend-security-part-2?utm_source=hashnode&utm_medium=feed)

Command Injection

2 min read · [ainahid.hashnode.dev](https://ainahid.hashnode.dev/backend-security-part-2?utm_source=hashnode&utm_medium=feed)

[Boluwatife Anwo](https://hashnode.com/@Wordsmith508) · [Dec 4, 2025](https://hashnode.com/posts/fortifying-backend-a-deep-dive-into-hashing-cors-csrf-xss-and-ddos-defense/6931a323a961227af2a12a59)

### [Fortifying Backend: A Deep Dive into Hashing, CORS, CSRF, XSS, and DDoS Defense](https://backend-docs.hashnode.dev/fortifying-backend-a-deep-dive-into-hashing-cors-csrf-xss-and-ddos-defense?utm_source=hashnode&utm_medium=feed)

1\. Introduction: The Stakes of Modern Backend Security. The difference between a successful business and a catastrophic failure in today's modern digital landscape often comes down to the integrity of its backend security. A data breach, like the inf...

6 min read · [backend-docs.hashnode.dev](https://backend-docs.hashnode.dev/fortifying-backend-a-deep-dive-into-hashing-cors-csrf-xss-and-ddos-defense?utm_source=hashnode&utm_medium=feed)

[Pushkar Singh Kanwal](https://hashnode.com/@pushkarSinghKanwal) · [Jun 7, 2024](https://hashnode.com/posts/the-role-of-access-and-refresh-tokens-in-backend-authentication/6662c45d6ae946b80d6c5168)

### [The Role of Access and Refresh Tokens in Backend Authentication](https://wn.hashnode.dev/the-role-of-access-and-refresh-tokens-in-backend-authentication?utm_source=hashnode&utm_medium=feed)

Access and Refresh Tokens: Enhancing User Experience by Reducing Login Frequency

2 min read · [wn.hashnode.dev](https://wn.hashnode.dev/the-role-of-access-and-refresh-tokens-in-backend-authentication?utm_source=hashnode&utm_medium=feed)