ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
Learn how to configure NestJS ValidationPipe to prevent mass assignment vulnerabilities and ensure strict type safety using class-validator and class-transformer.
Decide the right GraphQL depth limiting approach for your API. Compare static depth limits, dynamic cost analysis, and hybrid methods, then see how to implement and validate each in your server.
NGINX's limit_req module smooths abusive traffic with a leaky bucket — but the defaults (503 rejections, no burst, IP keys behind a load balancer) are subtly wrong for most APIs. Here's a config that works and how to verify it.
Persisted queries let a GraphQL server execute only pre-approved operations by hash. Here's how the APQ exchange works, when to move to a strict allow-list, and how to verify it.
Moving from Okta's default Org Authorization Server to a Custom AS lets you issue JWTs with your own scopes and audiences, but adds licensing, rate limits, and migration complexity. A practical walkthrough with validation and trade-offs.
Learn how to choose between API Keys, OAuth2, and Bearer tokens for your OpenAPI 3.0 specs, with a practical guide to implementing JWT authentication in Swagger UI.
Learn how to implement safe pagination in FeathersJS v5 to prevent server crashes and protect your database from unbounded queries using limit, skip, and query whitelisting.
Set up Cloudflare Rate Limiting to guard your APIs from abuse while keeping legitimate traffic smooth. Learn how to choose between fixed‑window and sliding‑window algorithms, deploy granular rules, and verify effectiveness with built‑in dashboards and API exports.
Guard short-circuiting can block your entire route pipeline unexpectedly. Learn how NestJS guards evaluate access, when they stop execution, and a practical example you can test today.
nestjs
graphql
nginx
okta
swagger
feathersjs
javascript
cloudflare