Ali nazari articles - 30 total
The Silent Killers in Node.js: uncaughtException and unhandledRejection 🐦
Node.js is beloved for its non‑blocking, event‑driven architecture—but that same model can let...
Centralize Your Node.js Config: How to Leverage npm's config Key with cross-env
Environment variables are indispensable for configuring applications without hard‑coding sensitive or...
Why You Should Deep Copy Request Payloads in Node.js (Express & NestJS)
When building backend APIs with Node.js—especially with frameworks like Express or NestJS—you’ll...
Streamlining Image Moderation API Uploads in Node.js: From Native Fetch to Form‑Data and DNS Fixes ⚙
In this post, we’ll walk through our journey integrating the Sightengine image moderation API into a...
Content Moderation in Node.js: Building a Scalable Image Moderation Pipeline with MinIO, BullMQ, ClamAV, DeepStack & Hashing 🧬
Content moderation is critical in user-generated platforms. Whether you're running a social app,...
Save Hours on API Testing: Auto-Generate Postman Collections from Your Express.js App 🧪
Shipping a well-documented API can feel like a second job. You build your Express routes, then spend...
Securing Redis with ACLs and Integrating Redis Insight in Docker
Securing your Redis deployment is crucial once you begin relying on it for caching, messaging, or as...
Why You Should Delete jsonwebtoken in 2025 ⭐
For years, if you wanted to sign and verify JWTs in Node.js, your go-to library was jsonwebtoken....
Building a Scalable Base Repository with TypeScript & Mongoose 🔥
When you work on growing Node.js backends with MongoDB, every collection—Tags, Notes, Users,...
When a Single create() Call Becomes Two Writes: A Mongo + Mongoose Gotcha 😨
Picture this: you’ve just set up your MongoDB replica set, wired up Mongoose, and you call your...
Why Your MongoDB Transactions Aren’t Working in Docker — and How to Fix It 🚨
You’ve added startSession() and startTransaction() to your Mongoose code, only to be greeted...
Boost Your App Security with reCAPTCHA and IP-Based Fraud Detection 🛡
Hey folks! If you’re running any public-facing web app—think login screens, sign-up pages, and...
Fixing Race Conditions in Redis Counters: Why Lua Scripting Is the Key to Atomicity and Reliability
If you've ever built rate limiting or login throttling with Redis, chances are you've used INCR and...
Reliable Redis Connections in Node.js: Lazy Loading, Retry Logic & Circuit Breakers 🔦
If you’re using Redis in a Node.js application — especially in production — reliability isn’t...
Building Your Own HMAC-Signed Double-Submit CSRF
For years, Express apps have relied on the csurf middleware to defend against Cross-Site Request...
You Should Encrypt Your Environment Variables 🔑
Environment variables (.env files) are a popular way to manage configuration and secrets in modern...
Implementing API Header Versioning in node.js 🍗
API versioning via headers is a powerful way to evolve your API without breaking existing...
Derive TypeScript Types from Mongoose Schemas 🌿
When working with Mongoose and TypeScript, two helper types make your life much easier: /** *...
Race Conditions in JWT Refresh Token Rotation 🏃♀️➡️
Modern web apps often use JWTs for stateless authentication. Access tokens have short lifetimes...
Stress Testing in node.js 🧪
Stress testing is a form of performance testing where the application is pushed beyond its normal...
Timing Attacks in Node.js
Let’s start from the very beginning: What a timing attack is (CWE‑208), why it matters in Node.js,...
Express.js honeypot 🍯🐝
Hey there, fellow devs! In today’s fast-paced web world, keeping your admin routes locked down is...
GitHub Magic beans
Two Heads, One Commit The Commitizen Edition If you’re in a team that’s very particular...
Dependabot: Your GitHub Wingman
If you've done any sort of web development projects, chances are you're using some really cool...
Legendary Commits: Conventional with Emoji 👑😵
Writing commit messages is like a daily exercise you have to practice as a programmer. Even if you...
CODEOWNERS File: What’s the Buzz?
So, picture this: we’ve got this huge project on GitHub, right? Loads of folks are chipping in and...
sendBeacon in JavaScript
Have you ever needed to transmit information to the server when the user navigates to a different...
Practicing politeness in JavaScript code 🤬
Imagine that you published a big open source project and many people are currently changing your code...
Legendary Emails in Node js with mjml 📩
Sometimes I receive emails from various companies and start-ups that look very attractive and...
OWASP Dependency Check in Node js 🛡️
We use dependencies in all our software projects. However, sometimes the dependencies can introduce...