Backend
A beginner to advanced backend engineering library: HTTP and web fundamentals, Node.js and Spring Boot, API design, authentication and security, performance and caching, async processing and messaging, architecture and testing, deployment, and an interview question bank. Code was executed.
Start here for backend prep, from "what happens when a request hits the server" to "how do I make a consumer idempotent" and "why did my transaction not roll back". The examples use Node.js and Java, the two stacks most common in interviews, and the ideas transfer to Python, Go and .NET. Runnable snippets on these pages were executed, and facts that changed recently (Node.js 24 LTS with native TypeScript, Spring Boot 4, OWASP Top 10:2025, OAuth 2.1 and passkeys) are included where they matter.
- 01Backend Fundamentals
Beginner backend engineering: the life of an HTTP request, methods, status codes, headers, cookies and CORS, a runnable HTTP server, layered application structure, configuration and the twelve-factor app, data access, validation and errors, logging, and concurrency models.
Beginner - 02Node.js and Spring Boot
The two most common backend stacks: the Node.js runtime, event loop, worker threads and frameworks (Express, Fastify, NestJS), and Java Spring Boot 4 with dependency injection, MVC, JPA, @Transactional pitfalls and virtual threads. Runnable demos included.
Beginner to mid - 03API Design
Designing HTTP APIs that last: REST resource modeling, status codes, idempotency keys, conditional requests, cursor pagination, versioning, RFC 9457 problem details, long-running operations, GraphQL and DataLoader, gRPC, and webhooks with signatures. Runnable demos included.
Beginner to midTable of Contents1. Principles2. Resource Modeling and URLs3. Methods, Status Codes and Errors4. Safe Writes: Idempotency and Concurrency Control5. Collections: Filtering, Sorting, Pagination6. Versioning and Evolution7. Long-Running Operations and Uploads8. Rate Limiting and Quotas9. GraphQL10. gRPC and Protocol Buffers11. Webhooks+2 more - 04Authentication and Security
Backend security from beginner to advanced: sessions vs tokens, password hashing, JWT pitfalls, OAuth 2.0 and 2.1 with PKCE, OIDC, MFA with TOTP and passkeys, authorization models, and the OWASP Top 10:2025 with concrete defenses. Runnable demos included.
Mid to advancedTable of Contents1. Authentication vs Authorization2. Sessions and Tokens3. Passwords4. JWT5. OAuth 2.0, OAuth 2.1 and OpenID Connect6. Multi-Factor Authentication and Passkeys7. Authorization8. OWASP Top 10:20259. Injection and Input Attacks10. Web-Facing Defenses11. Secrets, Crypto and Supply Chain+1 more - 05Performance and Caching
Backend performance: measure first, profile, find where time goes, HTTP caching with ETag and 304, application caches with single-flight stampede protection, DataLoader batching, concurrency limits, database access, payload size, Node and JVM tuning, and load testing. Demos executed.
Mid to advanced - 06Async Processing and Messaging
Background work and messaging for backend engineers: when to go async, job queues, retries with backoff, idempotent consumers, dead-letter queues, the transactional outbox, event schemas, scheduling, webhooks delivery, and durable workflows. Runnable queue and outbox demos.
Mid to advanced - 07Architecture and Testing
Backend architecture and testing: layered, hexagonal and clean architecture with a runnable Java example, DDD essentials, cross-cutting concerns, the testing pyramid, test doubles, Testcontainers, contract tests, and a runnable Node test-runner example with mocks.
Mid to advanced - 08Deployment and Runtime
Getting a backend into production and keeping it healthy: Docker images, docker compose, Kubernetes essentials, probes and graceful shutdown (with a runnable demo), configuration and secrets, CI/CD pipelines, serverless, infrastructure as code, and runtime observability.
MidTable of Contents1. The Path to Production2. Containers and Docker3. Local Development With Compose4. Kubernetes Essentials5. Health Checks and Graceful Shutdown6. Configuration and Secrets7. CI/CD Pipelines8. Serverless and Managed Platforms9. Infrastructure as Code10. Runtime Observability and Operations11. Questions and Answers - 09Backend Interview Playbook
Backend interview preparation: what each level is graded on, a 60-question bank with pointers, a worked REST API design exercise, coding round tasks mapped to runnable examples, a production debugging flowchart, cheat sheets, common mistakes, and study plans.
All levels
Reading Path
Pick Your Level
| You are | Read in this order |
|---|---|
| New to backend | Fundamentals, Node.js and Spring, API Design |
| Preparing for a mid-level loop | Add Authentication and Security, Performance and Caching, Architecture and Testing |
| Preparing for senior or staff | Add Async Processing, Deployment, and the System Design section |
| One week left | The Interview Playbook study plan |
Related Sections
- Databases covers the data layer: SQL, indexes, transactions, replication.
- System Design takes these building blocks to architecture scale.
- JavaScript and TypeScript for the language, Java for concurrency and the JVM.
- SDLC for CI/CD and delivery process, OOPS for design principles.