Search for a command to run...
Articles tagged with #nestjs
Your JWTs are working perfectly. Your database is leaking anyway — here's why authentication and authorization are not the same thing, and how to close the gap in NestJS + PostgreSQL
@nestjs/throttler counts requests per IP. It has no idea what an account is. Here's what that gap actually looks like, and the Redis-backed lockout that closes it.
Invalid, expired, revoked, and reused tokens aren't the same. Build real refresh token reuse detection in NestJS + Postgres—and verify it revokes only the compromised session.
Build production-ready full-text search in NestJS with TypeORM and PostgreSQL using ranked results, generated tsvector columns, GIN indexes, highlighting, and typo tolerance.
A practical, code-first guide to adding WebAuthn passkey registration and login to NestJS with PostgreSQL, covering credential storage, challenge handling, security, and production hardening.
I built the same endpoint three ways and load-tested them myself — the results don't match the usual claims, and the reasons why are more useful than the numbers.
