Tag archive

#security

Topic-specific entry points for internal linking, discovery, and deeper subject exploration.

12 articles

Negative Result Caching: Protecting Databases

Negative Result Caching If a user searches for a non-existent ID, don't let that query hit your main database every time. Cache the (or "not found") result in Redis with a short TTL to protect your system.

Apr 20, 20261 min read

Deep Dive

#caching#performance#security

System DesignAdvanced

Multi-Tenancy in NoSQL: Data Isolation Strategies for SaaS

Multi-Tenancy in NoSQL: Designing for SaaS Scale Building a Software-as-a-Service (SaaS) application requires a fundamental decision: how to isolate data for different customers (tenants). In the NoSQL world, there are t…

Apr 20, 20262 min read

Deep Dive

#multi-tenancy#saas#nosql

System DesignAdvanced

Stateless Auth: Managing JWT Blacklisting at Scale

Stateless Auth: JWT Revocation JWTs are often marketed as "stateless authentication", but the first real security requirement (logout, account disable, token theft response) immediately introduces state. If you do not de…

Apr 20, 20264 min read

Deep Dive

#jwt#authentication#security

System DesignAdvanced

System Design: Designing a Global Distributed Rate Limiter

System Design Masterclass: Designing a Distributed Rate Limiter In a distributed environment, a single malicious script, a misconfigured client, or a massive traffic spike can easily overwhelm your backend servers, bring…

Apr 20, 20266 min read

Case StudyBackend Systems Mastery

#system-design#rate-limiting#redis

System DesignAdvanced

System Design: Designing a Global Payment Gateway (Stripe Scale)

System Design Masterclass: Designing a Payment Gateway (Stripe) Designing a system to serve photos or short URLs is fundamentally about optimizing for read-latency and disk space. If a user's photo fails to load, they re…

Apr 20, 20265 min read

Case StudyBackend Systems Mastery

#system-design#fintech#payment-gateway

System DesignAdvanced

System Design: Building a Session Management Platform

Sessions feel simple until they become a security boundary. A user logs in. The system gives them a token or cookie. Requests work. End of story. Then reality arrives: - one user is logged in on five devices - an access…

Apr 18, 202611 min read

Deep Dive

#system design#session management#authentication

AI/MLAdvanced

MCP for Backend Engineers: Tools, Agents, and Production Guardrails

MCP, the Model Context Protocol, is useful because it gives AI applications a standard way to connect to tools and context. For backend engineers, the interesting part is not the hype around agents. The interesting part…

Apr 8, 202614 min read

Deep Dive

#mcp#ai agents#tools

System DesignAdvanced

System Design: Building an Authorization Service

Authentication answers "Who are you?" Authorization answers "What are you allowed to do?" Most systems start with a simple role column on the user table. That works until the product grows. Then permissions become tenant…

Apr 8, 202613 min read

Deep Dive

#system design#authorization#permissions

System DesignAdvanced

System Design: Building a File Upload Platform

File upload looks easy until production traffic arrives. Users upload huge files, mobile networks drop halfway through, browsers retry, malicious files appear, thumbnails fail, metadata gets out of sync, signed URLs expi…

Apr 8, 202610 min read

Deep Dive

#system design#file upload#object storage

System DesignAdvanced

System Design: Building a Secrets Management Platform

Secrets management looks like a simple storage problem until you operate it in production. At first, the requirement sounds like this: "Store API keys and database passwords somewhere safe." Then real systems arrive. Ser…

Apr 8, 202613 min read

Deep Dive

#system design#secrets management#security

System DesignAdvanced

System Design: Building an Audit Log System for Compliance and Debugging

Audit logs answer a simple question: who did what, to which resource, from where, and when? That question matters during security investigations, customer support, compliance audits, data recovery, and debugging. A norma…

Apr 7, 20265 min read

Deep Dive

#system design#audit logs#compliance

JavaAdvanced

Spring Security OAuth2 and JWT: Production Implementation Guide

Spring Security is one of the most powerful and most misunderstood frameworks in the Java ecosystem. Its flexibility is its strength — and its complexity. Misconfigured security is worse than no security, because it give…

Jun 3, 20257 min read

Deep Dive

#spring security#oauth2#jwt