Server-side Best Practices

• SaaS
  • The Twelve-Factor App
• Restful API
  • Heroku's HTTP API Design Guide, \ Microsoft's API Design Best Practices, REST API Guidelines, \ Best Practices for Designing a Pragmatic RESTful API, \ Principles of good RESTful API Design
  • REST API Error Codes 101
  • Introducing JSON
• Microservices
  • A pattern language for microservices
    • Microservice Architecture, Monolithic Architecture
    • Decompose by business capability, subdomain
    • Service instance per container, Service deployment platform
    • Externalized configuration, Microservice chassis
    • Service discovery (Server-side, Client-side), Service registry, Remote Procedure Invocation
    • Database per service, Shared database
  • Microservices: From Design to Deployment
  • Microservices Resource Guide
  • API Gateway
    • Pattern: API Gateway / Backend for Front-End
    • Why an API Gateway?
    • Moving from REST to GraphQL / From REST to GraphQL / GraphQL vs. REST
    • Serverless and GraphQL: A Perfect Match for the New Cloud Paradigm
  • Serverless
    • Pattern: Serverless deployment
    • Microservices without the Servers
    • The Next Layer of Abstraction in Cloud Computing is Serverless
    • The essential guide to serverless technologies and architectures, \ An essential guide to the serverless ecosystem
    • Serverless Architecture: Five Design Patterns, \ Serverless Code Patterns
• Cloud / Distributed
  • Architecture
    • AWS Well-Architected
    • Azure's Cloud Fundamentals - Architecture styles, Pillars of software quality, Design principles
  • Static
    • Static Content Hosting, Valet Key, Content Delivery Network
  • Queue / Jobs
    • Queue-Based Load Leveling, Competing Consumers, Priority Queue
    • Background jobs
  • Decompose
    • Federated Identity
    • Pipes and Filters
    • Compute Resource Consolidation
  • Configuration
    • External Configuration Store, Runtime Reconfiguration
  • Storage / Querying
    • Cache-Aside, Caching
    • CQRS, Event Sourcing
    • Index Table, Materialized View
    • Data partitioning, Sharding
  • Resiliency / Availability
    • Retry, Circuit Breaker, Transient fault handling
    • Compensating Transaction
    • Health Endpoint Monitoring, Leader Election, Scheduler Agent Supervisor
    • The Reactive Manifesto
  • Multitenant
    • Manage Identity in Multitenant Applications
• Old-fashioned Web Hosting / Non-distributed
  • Ultimate Guide to Web Hosting / Web Hosting Beginner Guide
• Authentication / Authorization
  • Cookies vs Tokens: The Definitive Guide, \ The Ins and Outs of Token Based Authentication
  • Introduction to JSON Web Tokens
  • An Introduction to OAuth 2, Understanding OAuth2
    • The OAuth Bible
  • Tokens used by Auth0
    • Understanding Refresh Tokens
  • How To Safely Store A Password, \ You Wouldn't Base64 a Password - Cryptography Decoded, \ How to securely hash passwords?
  • Weak Signature Algorithm
• Security
  • Security Guide for Developers
    • Understanding CSRF, CSRF Demystified
    • Cross-site Scripting (XSS) Attack
  • OWASP Top Ten Cheat Sheet
  • WebAppSec/Secure Coding Guidelines
  • Node.js Security Checklist
  • Tools - see Tooling > Testing > Analysis
• Logging / Monitoring
  • Logging The Ultimate Guide
  • The Definitive Guide for Monitoring Node.js Applications
  • Monitoring and diagnostics
  • Tools - see Tooling > Workflow > Monitoring
• DevOps
  • Deployments Best Practices
  • Start your DevOps journey
  • The Practical DevOps Playbook
  • Tools - see Tooling > Workflow > Deployment > DevOps