Back to Blog

Tag

Posts tagged “backend”

4 articles on full-stack development, web fundamentals and backend systems.

Browse all 51 tags

abacaccess-tokensapi-designauthenticationauthorizationbackendbrowserbrowser-renderingcachingcertificatescookiescore-web-vitalscorscssomdebuggingdevtoolsdnsdnssecdomfrontendfundamentalsheadershstshttphttp2http3httpshydrationjwtmiddlewarenetworkingoauthobservabilityoidcopenid-connectpkceproduction-issuesrate-limitingrbacrefresh-tokensresolversreverse-proxysecuritysessionssocial-loginsslssrtcptlsttlweb-performance

OAuth 2.0 and OpenID Connect in Depth: Authorization Flows and Social Login in Practice

A practical guide to OAuth 2.0 and OpenID Connect covering authorization code flow, PKCE, ID tokens, scopes, social login, redirect URI security, and production mistakes.

oauthoidcopenid-connectauthorizationauthenticationsocial-loginpkcesecuritybackend

Sessions vs JWTs: Where Tokens Live, How They Expire, and Why It Matters

A practical comparison of server-side sessions and JWT authentication, covering storage, cookies, expiry, revocation, refresh-token rotation, browser security, and production tradeoffs.

authenticationsessionsjwtaccess-tokensrefresh-tokenscookiessecuritybackend

Authentication vs Authorization in Depth: Sessions, JWTs, RBAC, ABAC, and Access Control

A practical guide to authentication and authorization covering sessions, JWTs, access tokens, refresh tokens, RBAC, ABAC, tenant boundaries, and production access-control mistakes.

authenticationauthorizationjwtsessionsrbacabacsecuritybackend

Server-Side Request Flow in Depth: Proxies, Middleware, Auth, Rate Limiting, and Observability

A practical guide to what happens inside a server once a request arrives, covering reverse proxies, load balancers, middleware, routing, auth, rate limiting, database access, and observability.

backendmiddlewarereverse-proxyauthenticationauthorizationrate-limitingobservabilityapi-design