Backend & APIs

HTTP services, microservices, RPC, auth, caching, and resilient API design.

  • 9 Subtopics
  • 13 Tracked terms
  • Last 30 days Feed window

Inside Backend & APIs

What this topic collects on

An article joins this feed when it matches these terms. Each one is also a search of its own.

Latest in Backend & APIs


dev.to > sergey_shinder_ab2d943365 > one-transaction-left-open-for-three-weeks-stopped-every-write-in-our-database-4eb3

One transaction left open for three weeks stopped every write in our database

9+ min ago   (205+ words) At twenty past eleven on a Tuesday in June our order database stopped accepting writes. Reads worked. Every insert, update and delete failed with database is not accepting commands to avoid wraparound data loss. Autovacuum had been running anti wraparound…...


dev.to > sergey_shinder_ab2d943365 > we-replayed-failed-payouts-after-the-provider-had-forgotten-them-90c

We replayed failed payouts after the provider had forgotten them

10+ min ago   (212+ words) We pay our suppliers through a payment provider's payouts API. Every payout request carries an idempotency key built from our payout id, so that if we send the same request twice the provider recognises it and returns the original result…...


dev.to > anand_rathnas_d5b608cc3de > rate-limit-failed-logins-without-locking-out-victims-594j

Rate-Limit Failed Logins Without Locking Out Victims

5+ min ago   (79+ words) The naive 'N failures and this account is locked' turns your brute-force defense into a denial-of-service tool. The fix is one decision: what you key on. Tagged with security, redis, java, webdev. Liquid syntax error: Unknown tag 'endraw' Templates let…...


dev.to > kareem411 > how-we-built-a-3-tier-nodejs-cache-that-hits-28m-opssec-and-never-drops-a-key-on-eviction-1bkb

How We Built a 3-Tier Node.js Cache That Hits 2.8M ops/sec (And Never Drops a Key on Eviction)

22+ hour, 53+ min ago   (510+ words) Caching in Node.js usually forces a frustrating compromise. You either stick with a basic in-memory Map (or LRU-cache) that risks running your process out of memory (OOM) under heavy loads, or you accept the network latency floor and serialization…...


dev.to > firfircelik > kafka-just-learned-to-be-a-queue-postgres-has-been-one-all-along-2i9g

Kafka Just Learned to Be a Queue. Postgres Has Been One All Along.

5+ min ago   (1213+ words) On February 17, 2026, Apache Kafka 4.2 shipped with this line in the release announcement: "Kafka Queues (Share Groups) is now production-ready." That sentence quietly reopens one of backend engineering's oldest arguments. For years, "should my job queue be Postgres or Kafka?" had…...


dev.to > yff124 > every-careers-page-has-a-public-json-api-you-just-never-noticed-4hj4

Every careers page has a public JSON API — you just never noticed

13+ min ago   (563+ words) Most people who need job-posting data reach for a headless browser. They point Playwright at a careers page, hope the React app has hydrated, and write selectors that will break the next time marketing ships a redesign. You usually don't…...


dev.to > shazara556 > building-a-zero-downtime-dual-tier-cache-combining-in-memory-maps-with-amazon-dynamodb-in-4o16

Building a Zero-Downtime Dual-Tier Cache: Combining In-Memory Maps with Amazon DynamoDB in TypeScript

11+ min ago   (207+ words) When building real-time clinical AI systems and temporal digital twin simulators, latency and resilience are not just performance metrics—they are hard reliability requirements. Every clinical evaluation or simulation needs sub-millisecond repeatability, but cloud network hiccups or unprovisioned tables should…...


dev.to > freema > your-ai-built-app-wants-your-api-key-i-built-drobek-so-it-never-gets-it-4oj5

Your AI-built app wants your API key. I built drobek so it never gets it.

22+ min ago   (1093+ words) I built drobek with a specific boundary: the agent writes the browser app, while backend modules run on the drobek server. A proxy module can attach an API key without putting that key in the generated JavaScript. The agent can…...


codebeneath.com > handlingHttpRequest > token-based-security-in-web-applications.html

Token-Based Authentication in Web Applications

2+ week, 59+ min ago   (82+ words) I recall when my team studied Microsoft COM technologies in the late 1990s. At first, the complexity was overwhelming, but once our team lead explained the concepts in simple terms, everything became clear. Similarly, token-based security can be explained with a…...


dev.to > bar_dror_a3d32cb94b1 > http-keep-alive-and-connection-pooling-measured-1la1

HTTP Keep-Alive and Connection Pooling, Measured

22+ min ago   (700+ words) Originally published on Code Beneath. Keep-alive solves this by keeping the TCP connection open after the response. The next request reuses the same socket, skipping the handshake. Connection pooling takes this further: instead of sharing a single connection (which becomes…...