Systems & architecture

#api

2 posts tagged #api on DiCodeWeb, from fundamentals to production, newest first.

2 postsUpdated Oct 20, 2026

Oct 20, 2026

The OWASP API Security Top 10 in NestJS: vulnerable code, fixed code, and the tests that keep it fixed

All ten risks of the OWASP API Security Top 10 (2023) worked through in NestJS: ownership checks in scoped repositories, whitelisted DTOs, response shaping, CASL policies, cost-based rate limits, idempotent business flows, SSRF-safe fetch, and an authorization matrix in e2e tests.

Systems & architecture17 min

Sep 11, 2026

Type-Level TypeScript for API Contracts You Can't Misuse

Conditional types and infer, key remapping, template literal types that turn "/users/:id/posts/:postId" into typed params, a fetch client derived from a route map, typed errors, branded IDs, satisfies and const type parameters, a Zod bridge so the types aren't lies — and when to stop.

Tooling & workflow16 min

All tags

#nestjs
#owasp
#security
#typescript

Posts

The OWASP API Security Top 10 in NestJS: vulnerable code, fixed code, and the tests that keep it fixed

Type-Level TypeScript for API Contracts You Can't Misuse

Related tags