Articles for people who
ship the stack
Original rewrites on React, Node.js, TypeScript and AI — practical notes from the same engineering practice behind our operator software. Article bodies are in English.
Tagged: Security
Sessions vs. JWTs: Choosing the Right Node.js Auth Model
Learn how sessions and JWTs actually differ in Node.js authentication, where each one breaks down, and how to choose between them without regretting it later.
1335 wordsRead articleWhy Decoding Buffer Chunks as Text Breaks File Uploads
Explains how treating binary buffer data as UTF-8 text silently corrupts uploaded files and shows the correct byte-level handling to prevent it.
1375 wordsRead articleRefresh Token Strategy for Node.js Authentication Systems
Learn how to design, rotate, revoke, and securely store refresh tokens in Node.js so token theft and logout actually behave as expected.
2681 wordsRead articleBuilding Safe AI Agents with LangChain Guardrails and Middleware
Learn how deterministic and model-based guardrails work in LangChain to catch PII leaks, enforce business rules, and add human approval steps to AI agents.
3372 wordsRead articleNode.js Security Hardening: DoS, Injection, and Container Defense
Learn practical techniques to protect Node.js services from event loop DoS, ReDoS, injection attacks, and insecure containers using rate limiting and Helmet.
1457 wordsRead articleWhy DevSecOps Becomes the New Bottleneck in the AI Coding Era
Explains how AI-generated code shifts software engineering's bottleneck from writing code to verifying it, making automated DevSecOps the critical layer of trust.
3306 wordsRead article
About these articles
Request a 24h estimate
Need the same stack in a production operator layer? Send the brief — estimate within 24 hours.