compliance-engineering
Three Error Shapes, One API: Adopting RFC 9457 Problem Details
--- Fourth post from the compliance-ready backend kit, after nested JWTs, append-only audit logs and key rotation. Before I fixed…
#nestjs
7 posts RSS
compliance-engineering
Nested JWTs in Node.js: Decrypting a Token Is Not Verifying It
--- I have been building a compliance-ready backend kit: a NestJS and TypeScript monorepo where every capability maps to a named c…
scaling-javascript-nodejs
The HTTP QUERY Method: GET With a Body, in Node.js and NestJS
If you have ever built a search or filter endpoint, you have made this uncomfortable choice. Use GET, and your complex filter obje…
scaling-javascript-nodejs
Retries Are Not a Fix. They Are a Liability.
Before you read, run this test If you’re using background jobs, queues, or retries, answer this: If the same task runs twice, does…
scaling-javascript-nodejs
Your Background Jobs Are Not Failing. They Are Lying.
A few months ago, we had a system that was “working fine”. Jobs were getting processed. Workers were running. No errors in logs. B…
Stop Putting Secrets in process.env: Encrypt Env Vars with AWS KMS
This post starts with the production problem we hit in late 2025, the critical security vulnerability in React Server Components a…
scaling-javascript-nodejs
NestJS Microservices with RabbitMQ & PostgreSQL
In this blog post, we will walk you through the process of setting up a task manager application using NestJS and RabbitMQ. This a…