Engineering Notes

Practical notes on software engineering, application security, and DevOps.

2026-03-10 • 8 min read

Building a Secure REST API with Node.js

A practical guide to building a REST API with security built in from the start.

Node.jsAPI SecurityBackend

2026-04-02 • 6 min read

Authentication vs Authorization

Authentication is who you are. Authorization is what you can do — and where APIs most often fail.

API SecurityAuthorization

2026-05-18 • 7 min read

Dockerizing a Full-Stack Application

From local Compose to production — multi-stage builds and non-root users.

DockerDevOpsNode.js