#nodejs · Faiz Ahmed FarooquiPosts tagged nodejs.https://faizahmed.in/Three Error Shapes, One API: Adopting RFC 9457 Problem Detailshttps://faizahmed.in/rfc-9457-problem-details-api-errors/https://faizahmed.in/rfc-9457-problem-details-api-errors/Fri, 21 Aug 2026 07:30:00 GMTapirestnestjsnodejshttpKey Rotation Without Downtime: Never Generate a Key in a Migrationhttps://faizahmed.in/jwt-key-rotation-without-downtime/https://faizahmed.in/jwt-key-rotation-without-downtime/Fri, 21 Aug 2026 04:00:00 GMTpostgresqlkey-managementjwkssecuritynodejsAppend-Only Audit Logs in Postgres: Your Trigger Misses TRUNCATEhttps://faizahmed.in/append-only-audit-log-postgres-hash-chain/https://faizahmed.in/append-only-audit-log-postgres-hash-chain/Thu, 20 Aug 2026 10:00:00 GMTpostgresqlaudit-logsecuritycompliancenodejsNested JWTs in Node.js: Decrypting a Token Is Not Verifying Ithttps://faizahmed.in/nested-jwts-nodejs-decrypt-is-not-verify/https://faizahmed.in/nested-jwts-nodejs-decrypt-is-not-verify/Tue, 11 Aug 2026 09:30:00 GMTjwtjwejosenodejsnestjssecurityBuilding an MCP Server in TypeScripthttps://faizahmed.in/building-mcp-server-typescript/https://faizahmed.in/building-mcp-server-typescript/Mon, 06 Jul 2026 00:00:00 GMTai-engineeringtypescriptmcpnodejsRate Limiting: Token Bucket vs Sliding Windowhttps://faizahmed.in/rate-limiting-token-bucket-sliding-window-nodejs/https://faizahmed.in/rate-limiting-token-bucket-sliding-window-nodejs/Sat, 04 Jul 2026 00:00:00 GMTnodejsscalingrate-limitingredisPostgres as a Queue with SKIP LOCKEDhttps://faizahmed.in/postgres-queue-skip-locked/https://faizahmed.in/postgres-queue-skip-locked/Fri, 03 Jul 2026 00:00:00 GMTpostgresqlnodejsqueuesscalingConnection Pooling: Node.js, Postgres, PgBouncerhttps://faizahmed.in/connection-pooling-nodejs-postgres-pgbouncer/https://faizahmed.in/connection-pooling-nodejs-postgres-pgbouncer/Thu, 02 Jul 2026 00:00:00 GMTpostgresqlnodejsscalingperformanceRow-Level Security for Multi-Tenant SaaS in Postgreshttps://faizahmed.in/row-level-security-multi-tenant-saas-postgres/https://faizahmed.in/row-level-security-multi-tenant-saas-postgres/Wed, 01 Jul 2026 00:00:00 GMTpostgresqlmulti-tenancysecuritynodejsThe Outbox Pattern: Reliable Events Without 2PChttps://faizahmed.in/outbox-pattern-reliable-events-without-2pc/https://faizahmed.in/outbox-pattern-reliable-events-without-2pc/Mon, 29 Jun 2026 00:00:00 GMToutboxmicroservicespostgresqlnodejsreliabilityDesigning Webhooks: Delivery, Retries, Signatureshttps://faizahmed.in/designing-webhooks-delivery-retries-signature-verification/https://faizahmed.in/designing-webhooks-delivery-retries-signature-verification/Sun, 28 Jun 2026 00:00:00 GMTwebhooksfintechnodejsreliabilitysecurityIdempotency Keys: How Stripe-Style APIs Prevent Double Chargeshttps://faizahmed.in/idempotency-keys-prevent-double-charges/https://faizahmed.in/idempotency-keys-prevent-double-charges/Sat, 27 Jun 2026 00:00:00 GMTapifintechnodejspostgresqlreliabilityHow I Actually Use AI to Ship Code: Context Engineering Over Clever Promptshttps://faizahmed.in/how-i-use-ai-to-ship-code/https://faizahmed.in/how-i-use-ai-to-ship-code/Wed, 24 Jun 2026 10:00:00 GMTaiproductivitynodejsThe HTTP QUERY Method: GET With a Body, in Node.js and NestJShttps://faizahmed.in/http-query-method-nodejs-nestjs/https://faizahmed.in/http-query-method-nodejs-nestjs/Tue, 23 Jun 2026 16:00:00 GMTnodejsnestjsapihttptypescriptUsing AI Without Leaking Your Secrets: A Threat Model for AI-Assisted Developmenthttps://faizahmed.in/using-ai-without-leaking-secrets/https://faizahmed.in/using-ai-without-leaking-secrets/Tue, 23 Jun 2026 10:00:00 GMTaisecuritynodejsawssecretsLoading Secrets at Runtime Without Leaking Them: config(), the Keystore, and runhttps://faizahmed.in/secret-keystore-runtime-config-loader-nodejs/https://faizahmed.in/secret-keystore-runtime-config-loader-nodejs/Fri, 12 Jun 2026 13:17:21 GMTawsnodejssecuritydevopsbackendEncrypt Your .env with One Command: The secret-keystore CLIhttps://faizahmed.in/secret-keystore-cli-encrypt-env-aws-kms/https://faizahmed.in/secret-keystore-cli-encrypt-env-aws-kms/Fri, 12 Jun 2026 12:59:34 GMTawssecuritynodejsbackenddevopsYour .env Is a Loaded Gun: A Saner Threat Model for Node.js Secretshttps://faizahmed.in/nodejs-secrets-threat-model-aws-kms/https://faizahmed.in/nodejs-secrets-threat-model-aws-kms/Fri, 12 Jun 2026 11:31:09 GMTsecurityawsnodejsbackenddevopsEncrypted .env for Node.js with AWS KMS: The Complete Guidehttps://faizahmed.in/encrypted-env-aws-kms-nodejs-complete-guide/https://faizahmed.in/encrypted-env-aws-kms-nodejs-complete-guide/Fri, 12 Jun 2026 11:24:08 GMTsecurityawsnodejsdevopsbackendRetries Are Not a Fix. They Are a Liability.https://faizahmed.in/why-retries-are-not-a-fix/https://faizahmed.in/why-retries-are-not-a-fix/Sat, 18 Apr 2026 05:00:00 GMTdistributed-systemssystem-designbackground-jobsnodejsnestjsqueue-systemsYour Background Jobs Are Not Failing. They Are Lying.https://faizahmed.in/why-your-background-jobs-are-lying/https://faizahmed.in/why-your-background-jobs-are-lying/Thu, 16 Apr 2026 11:17:39 GMTbackground-jobsdistributed-systemssystem-designbackend-engineeringqueue-systemsnestjsnodejsidempotencyreliability-engineeringasync-processingStop Putting Secrets in process.env: Encrypt Env Vars with AWS KMShttps://faizahmed.in/secret-keystore/https://faizahmed.in/secret-keystore/Sat, 21 Feb 2026 19:30:57 GMTsecurityawsattestationnodejsnextjsnestjsdevopscloudbackendScaling the Boring Stuff: Sending 10 Million Notifications with a Simple Node.js Job Workerhttps://faizahmed.in/scaling-the-boring-stuff-sending-10-million-notifications-with-a-simple-nodejs-job-worker/https://faizahmed.in/scaling-the-boring-stuff-sending-10-million-notifications-with-a-simple-nodejs-job-worker/Wed, 04 Feb 2026 13:30:28 GMTnodejssystem-designscalabilitybackend-engineeringdistributed-systemsYour Node.js AWS SDK v3 App Will Crash in Production Without This maxSockets Fixhttps://faizahmed.in/your-nodejs-aws-sdk-v3-app-will-crash-in-production-without-this-maxsockets-fix/https://faizahmed.in/your-nodejs-aws-sdk-v3-app-will-crash-in-production-without-this-maxsockets-fix/Fri, 07 Nov 2025 07:03:11 GMTmaxsocketsawsnodejsaws-sdkproductionSecrets Sprawl in Node.js Projects: Detection, Prevention & Secure Deployment (2025)https://faizahmed.in/secrets-sprawl-in-nodejs-projects-detection-prevention-and-secure-deployment-2025/https://faizahmed.in/secrets-sprawl-in-nodejs-projects-detection-prevention-and-secure-deployment-2025/Tue, 05 Aug 2025 08:07:20 GMTnodejssecrets-managementgitguardiandevsecopsci-cdbackend-engineeringcloud-securitysoftware-engineeringsecurityZero-Downtime Deployments in Node.js: Real Strategies, Real Exampleshttps://faizahmed.in/zero-downtime-deployments-in-nodejs/https://faizahmed.in/zero-downtime-deployments-in-nodejs/Tue, 29 Jul 2025 07:53:48 GMTnodejszero-downtimedevopssreci-cdcanary-releasebluegreen-deploymentmicroservicesdeployment-strategiessoftware-engineeringMaster Docker in Real Projects: Compose + CI/CD + Best Practiceshttps://faizahmed.in/master-docker-compose-cicd/https://faizahmed.in/master-docker-compose-cicd/Wed, 23 Jul 2025 08:52:37 GMTpostgresqlsoftware-engineeringdockernodejsweb-developmentdevopscontainersci-cdphpmyadmindocker-composegithub-actions-1backend-engineeringAPI Observability: Logs, Traces, Metrics with OpenTelemetryhttps://faizahmed.in/api-observability-logs-traces-metrics-with-opentelemetry/https://faizahmed.in/api-observability-logs-traces-metrics-with-opentelemetry/Tue, 15 Jul 2025 11:30:42 GMTnodejsopentelemetryobservabilityapisbackend-engineeringmicroservicesdevopsjaegerprometheusgrafanasoftware-engineeringdistributed-systemsmonitoringloggingtracingHow to Architect Multi-Tenant SaaS Backends in 2025 (PostgreSQL + Node.js)https://faizahmed.in/architect-multi-tenant-saas-backends-in-2025-postgresql-nodejs/https://faizahmed.in/architect-multi-tenant-saas-backends-in-2025-postgresql-nodejs/Fri, 11 Jul 2025 11:30:13 GMTnodejspostgresqlsaasmultitenancysoftware-architecturetech-leadershipdevtoolsjavascriptexpressPackaging Node.js Libraries the Right Way: ESM, CommonJS, and Bundlers in 2025https://faizahmed.in/packaging-nodejs-libraries-in-2025/https://faizahmed.in/packaging-nodejs-libraries-in-2025/Wed, 09 Jul 2025 11:30:22 GMTnodejsnpmjavascriptesmcommonjstypescriptrolluptsupopensourcedevtoolsbackend-engineeringweb-developmentJWT vs PASETO vs Session-Based Authhttps://faizahmed.in/jwt-vs-paseto-vs-session-based-auth/https://faizahmed.in/jwt-vs-paseto-vs-session-based-auth/Mon, 23 Jun 2025 11:30:29 GMTauth-architecturewebsecuritynodejsauthenticationpasetojwtbackenddevtipsoauthaccess-controlHow to Prevent Replay Attacks with JWTs: JWS vs JWE and Fingerprint Validation in Node.jshttps://faizahmed.in/how-to-prevent-replay-attacks-with-jwts-jws-vs-jwe-and-fingerprint-validation-in-nodejs/https://faizahmed.in/how-to-prevent-replay-attacks-with-jwts-jws-vs-jwe-and-fingerprint-validation-in-nodejs/Fri, 06 Jun 2025 13:27:47 GMTnodejsjwtsecurityauthenticationbackendbackend-engineeringwebsecurityreplay-attackdevtipsexpressMemory Leaks and Garbage Collection in Node.js: What Developers Get Wrong (And How to Fix It)https://faizahmed.in/memory-leaks-and-garbage-collection-in-nodejs/https://faizahmed.in/memory-leaks-and-garbage-collection-in-nodejs/Wed, 21 May 2025 13:27:32 GMTnodejsjavascriptmemory-managementgarbagecollectionweb-developmentbackend-engineeringperformance-optimizationdebuggingv8-enginedevtipsStop Using JSON.parse on Huge Payloads: Streaming JSON in Node.jshttps://faizahmed.in/streaming-huge-json-in-nodejs/https://faizahmed.in/streaming-huge-json-in-nodejs/Wed, 07 May 2025 10:30:41 GMTnodejsjavascriptweb-performancebackend-engineeringstreamingmemory-managementjsonscalabilitysoftware-engineeringdevtipsOffset vs Cursor vs Keyset Pagination: Best Practices for Scalable APIshttps://faizahmed.in/offset-vs-cursor-vs-keyset-pagination/https://faizahmed.in/offset-vs-cursor-vs-keyset-pagination/Thu, 01 May 2025 07:47:13 GMTbackend-engineeringapi-designpaginationnodejsweb-developmentscalabilitysoftware-architectureBackpressure in Node.js: Handling Stream Flow the Right Wayhttps://faizahmed.in/handling-backpressure-in-nodejs/https://faizahmed.in/handling-backpressure-in-nodejs/Mon, 28 Apr 2025 06:59:57 GMTbackpressurenodejsstreamsKilling Your App with .map()? Here’s the Modern Fixhttps://faizahmed.in/killing-your-app-with-map-heres-the-modern-fix/https://faizahmed.in/killing-your-app-with-map-heres-the-modern-fix/Wed, 23 Apr 2025 11:12:37 GMTarraymapgarbagecollectionjavascriptnodejsarrayUnderstanding Express Typescripthttps://faizahmed.in/express-typescript/https://faizahmed.in/express-typescript/Sun, 12 Jan 2020 18:30:00 GMTnodejsexpresstypescriptmongodbboilerplateNodeJS without NPMhttps://faizahmed.in/nodejs-without-npm/https://faizahmed.in/nodejs-without-npm/Sun, 19 Aug 2018 18:30:00 GMTnodejsnpmweb-developmentapisrest-apiWhat's NodeJS?https://faizahmed.in/whats-nodejs/https://faizahmed.in/whats-nodejs/Tue, 19 Jun 2018 18:30:00 GMTnodejsintroduction