Featured
Cache-aside with Redis in an Express API
A practical walkthrough of the cache-aside pattern: what to cache, how to key it, when to invalidate, and the mistakes that quietly serve stale data.
Md. Shafikul Islam
3 min read
Blog
Notes on backend engineering, SaaS architecture and building for the web.
Md. Shafikul Islam
3 min read
Designing a multi-tenant data model with PostgreSQL and Prisma
Shared tables, a tenant id on every row, and the guard rails that stop one customer from ever seeing another's data.
Md. Shafikul Islam
2 min read
Refresh-token rotation, explained without hand-waving
Short-lived access tokens, rotating refresh tokens and reuse detection — how the pieces fit together in a Node.js API.
Md. Shafikul Islam
2 min read
RBAC that scales past “admin” and “user”
Model permissions as scopes, group them into roles, and check them in one place — a structure that survives the tenth new feature.