Roadmap · Step 4 of 8

Backend roadmap

Build servers, APIs and databases, and keep them secure. Read the series from top to bottom, and each series from its first lesson to its last.
Level
Intermediate
Series
5
Lessons
49
Cost
Free
Loading your progress…

Start here

  1. Step 4

    Backend

    Build servers, APIs and databases, and keep them secure.

    Intermediate5 series49 lessons
    Node.js From Zero10 lessonsOpen series →
    1. 0What Node.js Is and How It Runs Your Code
    2. 1The Event Loop: Timers, Promises and the Poll Phase
    3. 2Files, Paths and Buffers
    4. 3Streams and Backpressure
    5. 4An HTTP Server From Scratch
    6. 5Express and Fastify: Middleware, Routing and Validation
    7. 6Errors, Logging and Graceful Shutdown
    8. 7Concurrency: Promises, Worker Threads, Clusters and Child Processes
    9. 8Testing, Performance and Production Habits
    10. 9Node.js Interview Questions With Model Answers
    API Design10 lessonsOpen series →
    1. 0What Makes a Good API: Resources, URLs and the Contract
    2. 1HTTP Methods, Status Codes and Idempotency in Practice
    3. 2Request and Response Design: JSON Shapes, Errors and Validation
    4. 3Pagination, Filtering and Sorting
    5. 4Versioning, Compatibility and Evolving an API
    6. 5Idempotency Keys, Retries, Webhooks and Rate Limits
    7. 6API Authentication and Authorization: API Keys, OAuth 2.0 and Scopes
    8. 7Documenting APIs: OpenAPI, Contracts and Testing
    9. 8GraphQL and gRPC: When Not to Use REST
    10. 9API Design Interview Questions and Review Checklist
    SQL & PostgreSQL8 lessonsOpen series →
    1. 0Tables, SELECT and WHERE
    2. 1Joins: Combining Tables
    3. 2Aggregates, GROUP BY and HAVING
    4. 3Subqueries, CTEs and Window Functions
    5. 4Designing a Schema: Keys, Normalisation and Constraints
    6. 5Indexes and EXPLAIN
    7. 6Transactions, Isolation Levels and Locks
    8. 7PostgreSQL Features: JSONB, Full-Text Search, Arrays and Safe Migrations
    Backend in Depth12 lessonsOpen series →
    1. 0Clean Code for Backends: Naming, Small Functions and Boundaries
    2. 1API Folder Structure: Routes, Controllers, Services, Repositories
    3. 2REST API Design Best Practices: Resources, Versioning, Status Codes
    4. 3Validation at the Edge: Schemas, DTOs and Trusting Nothing
    5. 4Error Handling: Operational vs Programmer Errors
    6. 5Logging and Observability: Structured Logs, Correlation IDs, Metrics
    7. 6Authentication and Authorization on the Server
    8. 7Database Fundamentals for API Engineers: Indexes, Transactions, Isolation
    9. 8Prisma in Production: N+1, include, Batching and Connection Pools
    10. 9REST vs GraphQL (vs Hasura): How to Choose
    11. 10Node.js Performance Basics: Event Loop Blocking, Streams, Workers
    12. 11Testing an API: Unit, Integration and Contract
    Security for Developers9 lessonsOpen series →
    1. 0The Security Mindset: Threats, Attack Surface and the OWASP Top 10
    2. 1Injection: SQL Injection, Command Injection and How to Stop Them
    3. 2XSS, CSRF, Clickjacking and Security Headers
    4. 3Passwords and Login: Hashing, Sessions, MFA and Rate Limits
    5. 4Access Control: IDOR, Roles and Mass Assignment
    6. 5Secrets, Encryption and Data Protection
    7. 6Dependencies and the Supply Chain: npm, Lockfiles and GitHub Actions
    8. 7APIs and Servers: SSRF, File Uploads, Rate Limits and Misconfiguration
    9. 8Security in Practice: Code Review Checklist, Testing, Incidents and Interview Answers