ATamir taherkhaniinnestjs-skills.hashnode.dev·1d ago · 8 min readFinding a Business-Rule Bypass in a NestJS ModuleA wallet starts with a balance of 100. A checkout endpoint rejects a charge of 150. A bulk-charge endpoint accepts the same amount and leaves the balance at -50. Both endpoints belong to the same Nest01A
ATamir taherkhaniinnestjs-skills.hashnode.dev·1d ago · 5 min readStrategy Pattern in TypeScript and NestJS: A Delivery Quote ExampleThe Strategy pattern gives one operation several interchangeable implementations. A caller asks for a delivery quote; a selected pricing policy calculates it. The caller does not need to know the poli00
DKDimitry Katzinbasiliskin.hashnode.dev·2d ago · 13 min readWhy CQRS Is a Surprisingly Good Fit for Orchestrating Coding AgentsThe hard part of coding agents isn't starting them. It's knowing what to do when they stop, fail, ask a human, or disappear. A coding agent is not a normal function call. It might run for five minute02A
PLPacifique Linjanjainfreecodecamp.org·3d ago · 32 min readHow to Use NestJS Observe: An Observability Handbook for DevsObservability isn't a new problem, and NestJS is certainly not the first ecosystem to tackle it. But NestJS Observe is interesting because it asks a more specific question: what happens when observabi00
SMShilpa Mareddyinshilpamareddy.hashnode.dev·6d ago · 18 min readWhy in-memory MCP sessions fail behind a load balancer (NestJS demo)By Shilpa Mareddy Two copies of an MCP (Model Context Protocol) server (a server that AI applications call tools on) sit behind a round-robin load balancer (it sends each request to the next server in00
ZZyVOPinblog.zyvop.com·6d ago · 15 min readStop Logging Out Innocent Users: Building Production Refresh Token Rotation with Token Family Revocation in RedisEvery engineering team that implements JWT authentication eventually runs into the dilemma of session lifetime. If you issue long-lived access tokens (e.g., 30 days), you lose the ability to quickly r00
MCMattia Carcioneinxeno-js.hashnode.dev·Oct 1 · 10 min readXeno.JS vs NestJS: Different Approaches to TypeScript Application ArchitectureIf you are building a large TypeScript or Node.js application, you have probably encountered NestJS. NestJS is a mature backend framework with dependency injection, modules, controllers, middleware, g00
ZZyVOPinblog.zyvop.com·Oct 1 · 13 min readBuilding a Production Remote MCP Server in NestJS: Connecting Claude Desktop and Cursor to Your SaaSAnthropic's Model Context Protocol (MCP) has rapidly become the open standard for connecting AI coding assistants (like Cursor and Claude Desktop) to external data sources and developer tools. If you 00
ZZyVOPinblog.zyvop.com·Sep 28 · 4 min readHow to Hide Your Backend VPS IP Behind Vercel Using Next.js RewritesIf you host your frontend on Vercel and your backend on a custom VPS, your frontend usually makes API requests directly to the VPS's public IP address or domain. While this works, it exposes your back43JM
ZZyVOPinblog.zyvop.com·Sep 28 · 13 min readImplementing Two-Factor Authentication (TOTP) in NestJS: With Full Source CodePassword-only auth has one structural problem: a leaked password is a leaked account. Two-factor authentication (2FA) closes most of that gap by requiring a second, time-bound proof of identity — some00