# Express

Express is a web framework for Node.js.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## How to Connect Your Twilio Agent to External APIs in Node.js

DevFeed: [How to Connect Your Twilio Agent to External APIs in Node.js](<https://devfeed.tech/articles/how-to-connect-your-twilio-agent-to-external-apis-in-node-js-26245.md>)

Original publisher: [Read original article](<https://www.twilio.com/en-us/blog/developers/tutorials/product/how-to-connect-twilio-agent-to-external-apis-nodejs>)

Author: Dhruv Patel, Amanda Lange

Published: 2026-09-14T00:00:00Z

Content type: tutorial

Language: en

Sources: [Twilio Blog](<https://devfeed.tech/sources/twilio-blog.md>)

Topics: [AI Agent](<https://devfeed.tech/topics/ai-agent.md>), [Node.js](<https://devfeed.tech/topics/node-js.md>), [voice ai](<https://devfeed.tech/topics/voice-ai.md>), [REST API](<https://devfeed.tech/topics/rest-api.md>), [OpenAI](<https://devfeed.tech/topics/openai.md>), [Express](<https://devfeed.tech/topics/express.md>)

Tags: [agent](<https://devfeed.tech/tags/agent.md>), [ai](<https://devfeed.tech/tags/ai.md>), [ai-agent](<https://devfeed.tech/tags/ai-agent.md>), [developer-insights](<https://devfeed.tech/tags/developer-insights.md>), [environment-variables](<https://devfeed.tech/tags/environment-variables.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [openai](<https://devfeed.tech/tags/openai.md>), [rest-apis](<https://devfeed.tech/tags/rest-apis.md>), [visual-studio-code](<https://devfeed.tech/tags/visual-studio-code.md>), [voice](<https://devfeed.tech/tags/voice.md>)

### AI overview

This tutorial explains how to build a voice-enabled AI agent in Node.js with Twilio Conversation Relay and OpenAI. The agent uses LLM-driven tool calling to retrieve live data and take actions through an external REST API.

### Source excerpt

Build a voice-enabled AI agent in Node.js with Twilio Conversation Relay and OpenAI to dynamically fetch live data from external REST APIs.

## How to Orchestrate Multi-Call Conversations with an LLM and Twilio Conversation in Node.js Memory

DevFeed: [How to Orchestrate Multi-Call Conversations with an LLM and Twilio Conversation in Node.js Memory](<https://devfeed.tech/articles/how-to-orchestrate-multi-call-conversations-with-an-llm-and-twilio-conversation-in-node-js-memory-26244.md>)

Original publisher: [Read original article](<https://www.twilio.com/en-us/blog/developers/tutorials/orchestrate-multi-call-conversations-with-llm-twilio-conversation-memory-nodejs>)

Author: Amanda Lange, Dhruv Patel

Published: 2026-09-14T00:00:00Z

Content type: tutorial

Language: en

Sources: [Twilio Blog](<https://devfeed.tech/sources/twilio-blog.md>)

Topics: [Node.js](<https://devfeed.tech/topics/node-js.md>), [Large Language Model](<https://devfeed.tech/topics/llm.md>), [Express](<https://devfeed.tech/topics/express.md>), [OpenAI](<https://devfeed.tech/topics/openai.md>), [API](<https://devfeed.tech/topics/api.md>), [WebSocket](<https://devfeed.tech/topics/websocket.md>), [Machine learning](<https://devfeed.tech/topics/machine-learning.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [axios](<https://devfeed.tech/tags/axios.md>), [console](<https://devfeed.tech/tags/console.md>), [developer-insights](<https://devfeed.tech/tags/developer-insights.md>), [environment-variables](<https://devfeed.tech/tags/environment-variables.md>), [express](<https://devfeed.tech/tags/express.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [http](<https://devfeed.tech/tags/http.md>), [ide](<https://devfeed.tech/tags/ide.md>), [install](<https://devfeed.tech/tags/install.md>), [js](<https://devfeed.tech/tags/js.md>), [json](<https://devfeed.tech/tags/json.md>), [llm](<https://devfeed.tech/tags/llm.md>), [ngrok](<https://devfeed.tech/tags/ngrok.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [npm](<https://devfeed.tech/tags/npm.md>), [openai](<https://devfeed.tech/tags/openai.md>), [rest-api](<https://devfeed.tech/tags/rest-api.md>), [sdk](<https://devfeed.tech/tags/sdk.md>), [visual-studio-code](<https://devfeed.tech/tags/visual-studio-code.md>), [web](<https://devfeed.tech/tags/web.md>)

### AI overview

This tutorial shows how to build a Node.js Express service that uses Twilio Conversation Memory, OpenAI, and voice streams to preserve caller context, preferences, and action history across separate inbound calls. It covers project setup, package installation, local webhook exposure with ngrok, and access to Twilio's Conversation Memory REST API.

### Source excerpt

Learn how to orchestrate multi-call voice conversations using Node.js, OpenAI, and Twilio Conversation Memory to persist caller context across separate calls.

## Build a Video API with Twilio Programmable Video, Node.js, TypeScript, and Express

DevFeed: [Build a Video API with Twilio Programmable Video, Node.js, TypeScript, and Express](<https://devfeed.tech/articles/build-a-video-api-with-twilio-programmable-video-node-js-typescript-and-express-16098.md>)

Original publisher: [Read original article](<https://www.twilio.com/en-us/blog/developers/tutorials/product/build-api-twilio-programmable-video-node-js-typescript-express>)

Author: Mia Adjei

Published: 2026-08-31T00:00:00Z

Content type: tutorial

Language: en

Sources: [Twilio Blog](<https://devfeed.tech/sources/twilio-blog.md>)

Topics: [API](<https://devfeed.tech/topics/api.md>), [Node.js](<https://devfeed.tech/topics/node-js.md>), [Express](<https://devfeed.tech/topics/express.md>), [TypeScript](<https://devfeed.tech/topics/typescript.md>), [SDKs](<https://devfeed.tech/topics/sdks.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [api-js](<https://devfeed.tech/tags/api-js.md>), [api-keys](<https://devfeed.tech/tags/api-keys.md>), [api-node](<https://devfeed.tech/tags/api-node.md>), [api-nodejs](<https://devfeed.tech/tags/api-nodejs.md>), [api-twilio](<https://devfeed.tech/tags/api-twilio.md>), [build](<https://devfeed.tech/tags/build.md>), [build-api](<https://devfeed.tech/tags/build-api.md>), [developer-insights](<https://devfeed.tech/tags/developer-insights.md>), [env-file-security](<https://devfeed.tech/tags/env-file-security.md>), [express](<https://devfeed.tech/tags/express.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [javascript-api](<https://devfeed.tech/tags/javascript-api.md>), [node](<https://devfeed.tech/tags/node.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [nodejs](<https://devfeed.tech/tags/nodejs.md>), [nodejs-api](<https://devfeed.tech/tags/nodejs-api.md>), [tutorial](<https://devfeed.tech/tags/tutorial.md>), [twilio-api](<https://devfeed.tech/tags/twilio-api.md>), [twilio-programmable-video](<https://devfeed.tech/tags/twilio-programmable-video.md>), [typescript](<https://devfeed.tech/tags/typescript.md>), [use-api-with-javascript](<https://devfeed.tech/tags/use-api-with-javascript.md>), [video](<https://devfeed.tech/tags/video.md>), [video-api](<https://devfeed.tech/tags/video-api.md>), [video-javascript](<https://devfeed.tech/tags/video-javascript.md>), [video-js](<https://devfeed.tech/tags/video-js.md>)

### AI overview

A tutorial showing how to build an API that creates and manages video rooms programmatically using Twilio Programmable Video, Node.js, TypeScript, and Express.

### Source excerpt

Learn how to create and manage video chat rooms programmatically using Twilio Programmable Video and Node.js.

## How to add enterprise SSO to an Express.js API

DevFeed: [How to add enterprise SSO to an Express.js API](<https://devfeed.tech/articles/how-to-add-enterprise-sso-to-an-express-js-api-16016.md>)

Original publisher: [Read original article](<https://workos.com/blog/how-to-add-enterprise-sso-express-js-api>)

Author: WorkOS

Published: 2026-08-21T00:00:00Z

Content type: tutorial

Language: en

Sources: [WorkOS Blog](<https://devfeed.tech/sources/workos-blog.md>)

Topics: [Single sign-on (SSO)](<https://devfeed.tech/topics/sso.md>), [Tutorial](<https://devfeed.tech/topics/tutorial.md>), [Express](<https://devfeed.tech/topics/express.md>), [Node.js](<https://devfeed.tech/topics/node-js.md>), [API](<https://devfeed.tech/topics/api.md>), [JSON Web Tokens](<https://devfeed.tech/topics/jwt.md>), [OpenID connect (OIDC)](<https://devfeed.tech/topics/oidc.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [Back end](<https://devfeed.tech/topics/backend.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [js](<https://devfeed.tech/tags/js.md>), [jwt](<https://devfeed.tech/tags/jwt.md>), [middleware](<https://devfeed.tech/tags/middleware.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [oidc](<https://devfeed.tech/tags/oidc.md>), [security](<https://devfeed.tech/tags/security.md>), [sso](<https://devfeed.tech/tags/sso.md>)

### AI overview

A step-by-step tutorial for adding enterprise SSO to an Express.js API with WorkOS. It covers SAML and OIDC login redirects, callback handling, JWT verification on protected routes, and multi-tenant authorization using signed token claims.

### Source excerpt

Add enterprise SSO (SAML and OIDC) to an Express.js API with WorkOS. Step-by-step Node.js code for the login redirect, the callback, and JWT verification on protected API routes.

## Run multiple frameworks in one project with Vercel Services

DevFeed: [Run multiple frameworks in one project with Vercel Services](<https://devfeed.tech/articles/run-multiple-frameworks-in-one-project-with-vercel-services-1077.md>)

Original publisher: [Read original article](<https://vercel.com/changelog/run-multiple-frameworks-in-one-project-with-vercel-services>)

Author: Yury Selivanov

Published: 2026-06-30T00:00:00Z

Content type: release

Language: en

Sources: [Vercel News](<https://devfeed.tech/sources/vercel-news.md>)

Topics: [Vercel](<https://devfeed.tech/topics/vercel.md>), [Frameworks](<https://devfeed.tech/topics/frameworks.md>), [Back end](<https://devfeed.tech/topics/backend.md>), [Front end](<https://devfeed.tech/topics/frontend.md>), [Express](<https://devfeed.tech/topics/express.md>), [FastAPI](<https://devfeed.tech/topics/fastapi.md>), [Flask](<https://devfeed.tech/topics/flask.md>), [Hono](<https://devfeed.tech/topics/honojs.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>), [Go](<https://devfeed.tech/topics/go.md>), [Routing (disambiguation)](<https://devfeed.tech/topics/routing.md>), [Rust](<https://devfeed.tech/topics/rust.md>)

Tags: [backend](<https://devfeed.tech/tags/backend.md>), [backends](<https://devfeed.tech/tags/backends.md>), [cli](<https://devfeed.tech/tags/cli.md>), [frameworks](<https://devfeed.tech/tags/frameworks.md>), [frontend](<https://devfeed.tech/tags/frontend.md>), [go](<https://devfeed.tech/tags/go.md>), [routing](<https://devfeed.tech/tags/routing.md>), [rust](<https://devfeed.tech/tags/rust.md>), [ui](<https://devfeed.tech/tags/ui.md>), [vercel](<https://devfeed.tech/tags/vercel.md>)

### AI overview

Vercel Services lets developers deploy multiple frontend and backend services using different frameworks within one Vercel project. Services share a domain, communicate privately through service bindings, and build, preview, and roll back together.

### Source excerpt

You can now deploy multiple frontends and backends together within a single Vercel project. Vercel Services is now available, allowing you to deploy full stack apps with multiple frameworks on a shared domain, where services talk to each other privately and deployments build, preview, and roll back together. Services are defined in vercel.json: From there, your services show up across the dashboard and CLI: The Deployments panel visualizes the services graph The Logs UI filters by individual service vercel dev runs every service locally for a production-like environment Service bindings Services talk to each other internally with the new bindings key, without routing through the public internet: The frontend reaches the backend privately through the URL in BACKEND_INTERNAL_URL: Framework-defined infrastructure Most frameworks run with zero configuration. Framework-defined infrastructure means each service's framework is auto-detected and auto-provisioned, from FastAPI and Flask to Express and Hono, with first-class support for Go and Rust. Services run on Fluid compute with Active CPU pricing, so you only pay for the time your code is actually running. Read the documentation to get started. Read more

## WebSocket support is now in Public Beta

DevFeed: [WebSocket support is now in Public Beta](<https://devfeed.tech/articles/websocket-support-is-now-in-public-beta-1199.md>)

Original publisher: [Read original article](<https://vercel.com/changelog/websocket-support-is-now-in-public-beta>)

Author: Casey Gowrie

Published: 2026-06-22T00:00:00Z

Content type: release

Language: en

Sources: [Vercel News](<https://devfeed.tech/sources/vercel-news.md>)

Topics: [WebSocket](<https://devfeed.tech/topics/websocket.md>), [Vercel](<https://devfeed.tech/topics/vercel.md>), [Node.js](<https://devfeed.tech/topics/node-js.md>), [Express](<https://devfeed.tech/topics/express.md>), [Socket.IO](<https://devfeed.tech/topics/socket-io.md>), [Streaming](<https://devfeed.tech/topics/streaming.md>)

Tags: [communication](<https://devfeed.tech/tags/communication.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [server](<https://devfeed.tech/tags/server.md>), [streaming](<https://devfeed.tech/tags/streaming.md>), [vercel](<https://devfeed.tech/tags/vercel.md>)

### AI overview

Vercel Functions now support WebSocket connections in public beta, enabling bidirectional communication for realtime features such as AI streaming, chat, and collaborative applications. The connections run on Fluid compute and use the same limits and pricing as other Function invocations, with Active CPU pricing applying only while messages are processed.

### Source excerpt

Vercel Functions can now serve WebSocket connections, enabling bidirectional communication between clients and server-side code on Vercel. Use WebSockets for realtime features such as interactive AI streaming, chat, and collaborative apps. WebSocket connections run on Fluid compute and follow the same limits and pricing as other Function invocations. With Active CPU pricing, billing only applies to the time your Function spends processing messages, not idle connection time. You can serve WebSocket connections using standard Node.js libraries, with no additional configuration: Higher-level libraries like Socket.IO are also supported. Read the documentation to get started. Read more

## Test Password Strength and Password History with TypeScript and MongoDB

DevFeed: [Test Password Strength and Password History with TypeScript and MongoDB](<https://devfeed.tech/articles/test-password-strength-and-password-history-with-typescript-and-mongodb-21850.md>)

Original publisher: [Read original article](<https://www.thepolyglotdeveloper.com/blog/2026/06/test-password-strength-and-password-history-with-typescript-and-mongodb/>)

Author: Nic Raboy

Published: 2026-06-19T12:00:00Z

Content type: tutorial

Language: en

Sources: [Nic Raboy](<https://devfeed.tech/sources/nic-raboy.md>)

Topics: [passwords](<https://devfeed.tech/topics/passwords.md>), [MongoDB](<https://devfeed.tech/topics/mongodb.md>), [TypeScript](<https://devfeed.tech/topics/typescript.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Development](<https://devfeed.tech/topics/development.md>), [Express](<https://devfeed.tech/topics/express.md>), [Node.js](<https://devfeed.tech/topics/node-js.md>), [API](<https://devfeed.tech/topics/api.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [development](<https://devfeed.tech/tags/development.md>), [express](<https://devfeed.tech/tags/express.md>), [getting-started](<https://devfeed.tech/tags/getting-started.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [mongodb](<https://devfeed.tech/tags/mongodb.md>), [node](<https://devfeed.tech/tags/node.md>), [password](<https://devfeed.tech/tags/password.md>), [tutorial](<https://devfeed.tech/tags/tutorial.md>), [typescript](<https://devfeed.tech/tags/typescript.md>)

### AI overview

A tutorial on building a TypeScript API with Express and MongoDB that enforces password-strength rules, stores current and previous password hashes, authenticates users, and rejects password reuse.

### Source excerpt

Just about every application you build is going to need some form of user authentication, and the moment you have user accounts, you have passwords to manage. Storing them safely is only part of the j... The post Test Password Strength and Password History with TypeScript and MongoDB appeared first on DEV.

## MongoDB and GraphQL: A Perfect Match

DevFeed: [MongoDB and GraphQL: A Perfect Match](<https://devfeed.tech/articles/mongodb-and-graphql-a-perfect-match-21845.md>)

Original publisher: [Read original article](<https://www.thepolyglotdeveloper.com/blog/2026/05/mongodb-and-graphql-a-perfect-match/>)

Author: Nic Raboy

Published: 2026-05-15T12:00:00Z

Content type: tutorial

Language: en

Sources: [Nic Raboy](<https://devfeed.tech/sources/nic-raboy.md>)

Topics: [GraphQL](<https://devfeed.tech/topics/graphql.md>), [MongoDB](<https://devfeed.tech/topics/mongodb.md>), [Tutorial](<https://devfeed.tech/topics/tutorial.md>), [API](<https://devfeed.tech/topics/api.md>), [TypeScript](<https://devfeed.tech/topics/typescript.md>), [Node.js](<https://devfeed.tech/topics/node-js.md>), [Express](<https://devfeed.tech/topics/express.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [data](<https://devfeed.tech/tags/data.md>), [database](<https://devfeed.tech/tags/database.md>), [express](<https://devfeed.tech/tags/express.md>), [graphql](<https://devfeed.tech/tags/graphql.md>), [mongodb](<https://devfeed.tech/tags/mongodb.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [tutorial](<https://devfeed.tech/tags/tutorial.md>), [typescript](<https://devfeed.tech/tags/typescript.md>)

### AI overview

This tutorial explains how to build a GraphQL API with MongoDB using TypeScript. It covers the consistent JSON-like data flow between GraphQL queries, the application, and MongoDB, and lists prerequisites including MongoDB Atlas, Node.js 22+, and the MongoDB Node.js Driver 6.x.

### Source excerpt

GraphQL is a powerful and efficient way to build APIs. The client queries the API, similarly to how they would a database, and that API returns only the data that they've requested, often reducing the... The post MongoDB and GraphQL: A Perfect Match appeared first on DataCamp.

## Building a REST API With Express Framework and MongoDB

DevFeed: [Building a REST API With Express Framework and MongoDB](<https://devfeed.tech/articles/building-a-rest-api-with-express-framework-and-mongodb-21842.md>)

Original publisher: [Read original article](<https://www.thepolyglotdeveloper.com/blog/2026/05/building-a-rest-api-with-express-framework-and-mongodb/>)

Author: Nic Raboy

Published: 2026-05-08T12:00:00Z

Content type: tutorial

Language: en

Sources: [Nic Raboy](<https://devfeed.tech/sources/nic-raboy.md>)

Topics: [Express](<https://devfeed.tech/topics/express.md>), [MongoDB](<https://devfeed.tech/topics/mongodb.md>), [REST API](<https://devfeed.tech/topics/rest-api.md>), [Tutorial](<https://devfeed.tech/topics/tutorial.md>), [Node.js](<https://devfeed.tech/topics/node-js.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [Cross-origin resource sharing (CORS)](<https://devfeed.tech/topics/cors.md>), [.env](<https://devfeed.tech/topics/dotenv.md>), [JSON](<https://devfeed.tech/topics/json.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [code](<https://devfeed.tech/tags/code.md>), [cors](<https://devfeed.tech/tags/cors.md>), [database](<https://devfeed.tech/tags/database.md>), [development](<https://devfeed.tech/tags/development.md>), [express](<https://devfeed.tech/tags/express.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [json](<https://devfeed.tech/tags/json.md>), [mongodb](<https://devfeed.tech/tags/mongodb.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [nosql](<https://devfeed.tech/tags/nosql.md>), [rest](<https://devfeed.tech/tags/rest.md>), [rest-api](<https://devfeed.tech/tags/rest-api.md>), [tutorial](<https://devfeed.tech/tags/tutorial.md>)

### AI overview

A tutorial on building a REST API with Express Framework, MongoDB, and Node.js. It explains how JSON flows between clients, application logic, and MongoDB, then covers prerequisites, dependencies, CORS, environment configuration, and project structure.

### Source excerpt

Almost every modern web application will need a REST API for the frontend to communicate with, and in almost every scenario, that frontend is going to expect to work with JSON data. As a result, the b... The post Building a REST API With Express Framework and MongoDB appeared first on Hevo.

## Qinglong task scheduler RCE vulnerabilities exploited in the wild for cryptomining

DevFeed: [Qinglong task scheduler RCE vulnerabilities exploited in the wild for cryptomining](<https://devfeed.tech/articles/qinglong-task-scheduler-rce-vulnerabilities-exploited-in-the-wild-for-cryptomining-8058.md>)

Original publisher: [Read original article](<https://snyk.io/blog/qinglong-task-scheduler-rce-vulnerabilities/>)

Author: Julia Kinday

Published: 2026-04-27T00:00:00Z

Content type: news

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [incident](<https://devfeed.tech/topics/incident.md>), [Security](<https://devfeed.tech/topics/security.md>), [Express](<https://devfeed.tech/topics/express.md>), [GitHub Issues](<https://devfeed.tech/topics/github-issues.md>), [Docker](<https://devfeed.tech/topics/docker.md>), [GitHub](<https://devfeed.tech/topics/github.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [Server](<https://devfeed.tech/topics/server.md>), [Shell](<https://devfeed.tech/topics/shell.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [npm](<https://devfeed.tech/topics/npm.md>)

Tags: [application-security](<https://devfeed.tech/tags/application-security.md>), [attacks](<https://devfeed.tech/tags/attacks.md>), [auth](<https://devfeed.tech/tags/auth.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [ci-cd](<https://devfeed.tech/tags/ci-cd.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [cloud-security](<https://devfeed.tech/tags/cloud-security.md>), [code](<https://devfeed.tech/tags/code.md>), [developer](<https://devfeed.tech/tags/developer.md>), [devops](<https://devfeed.tech/tags/devops.md>), [docker](<https://devfeed.tech/tags/docker.md>), [enablement](<https://devfeed.tech/tags/enablement.md>), [github](<https://devfeed.tech/tags/github.md>), [github-issues](<https://devfeed.tech/tags/github-issues.md>), [incident](<https://devfeed.tech/tags/incident.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [malware](<https://devfeed.tech/tags/malware.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [open-source-security](<https://devfeed.tech/tags/open-source-security.md>), [routing](<https://devfeed.tech/tags/routing.md>), [security](<https://devfeed.tech/tags/security.md>), [security-labs](<https://devfeed.tech/tags/security-labs.md>), [self-hosted](<https://devfeed.tech/tags/self-hosted.md>), [servers](<https://devfeed.tech/tags/servers.md>), [snyk-code](<https://devfeed.tech/tags/snyk-code.md>), [snyk-container](<https://devfeed.tech/tags/snyk-container.md>), [snyk-learn](<https://devfeed.tech/tags/snyk-learn.md>), [snyk-open-source](<https://devfeed.tech/tags/snyk-open-source.md>), [snyk-security-intel](<https://devfeed.tech/tags/snyk-security-intel.md>), [tech](<https://devfeed.tech/tags/tech.md>), [typescript](<https://devfeed.tech/tags/typescript.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

### AI overview

Qinglong, an open-source self-hosted task scheduling panel, was exploited through two authentication bypass vulnerabilities affecting versions 2.20.1 and earlier. Attackers used unauthenticated remote code execution to deploy cryptocurrency miners on publicly accessible installations. The article describes the vulnerabilities, their Express.js routing and middleware flaws, and the impact on operators using cloud VPS instances and home servers.

### Source excerpt

Two authentication bypass vulnerabilities (CVE-2026-3965, CVE-2026-4047) in the Qinglong task scheduling panel were exploited in the wild to deploy cryptomining malware. Here's what happened, how the attacks worked, and what self-hosted application operators should learn from this incident.

## Build a Movie Watchlist with Node.js, TypeScript, and MongoDB

DevFeed: [Build a Movie Watchlist with Node.js, TypeScript, and MongoDB](<https://devfeed.tech/articles/build-a-movie-watchlist-with-node-js-typescript-and-mongodb-21839.md>)

Original publisher: [Read original article](<https://www.thepolyglotdeveloper.com/blog/2026/04/build-movie-watchlist-nodejs-typescript-mongodb/>)

Author: Nic Raboy

Published: 2026-04-13T13:37:28Z

Content type: tutorial

Language: en

Sources: [Nic Raboy](<https://devfeed.tech/sources/nic-raboy.md>)

Topics: [MongoDB](<https://devfeed.tech/topics/mongodb.md>), [Node.js](<https://devfeed.tech/topics/node-js.md>), [TypeScript](<https://devfeed.tech/topics/typescript.md>), [Express](<https://devfeed.tech/topics/express.md>), [REST API](<https://devfeed.tech/topics/rest-api.md>), [API](<https://devfeed.tech/topics/api.md>), [Development](<https://devfeed.tech/topics/development.md>), [web applications](<https://devfeed.tech/topics/web-applications.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [configuration](<https://devfeed.tech/tags/configuration.md>), [express](<https://devfeed.tech/tags/express.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [json](<https://devfeed.tech/tags/json.md>), [mongodb](<https://devfeed.tech/tags/mongodb.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [nosql](<https://devfeed.tech/tags/nosql.md>), [rest-api](<https://devfeed.tech/tags/rest-api.md>), [tutorial](<https://devfeed.tech/tags/tutorial.md>), [typescript](<https://devfeed.tech/tags/typescript.md>)

### AI overview

A tutorial that builds a small movie watchlist REST API with Node.js, TypeScript, Express, and MongoDB. It covers project setup, prerequisites, schema design, MongoDB Search for full-text search, configuration, and development commands.

### Source excerpt

Almost every modern web application will need a REST API for a client to talk to, and in almost every scenario, that client is going to expect JSON. The best developer experience is a stack where you ... The post Build a Movie Watchlist with Node.js, TypeScript, and MongoDB appeared first on DEV.

## How to Set Up Webhooks for Payment Notifications

DevFeed: [How to Set Up Webhooks for Payment Notifications](<https://devfeed.tech/articles/how-to-set-up-webhooks-for-payment-notifications-10434.md>)

Original publisher: [Read original article](<https://dodopayments.com/blogs/webhooks-payment-notifications/>)

Author: Ayush Agarwal

Published: 2026-04-13T00:00:00Z

Content type: tutorial

Language: en

Sources: [Dodo Payments Blog](<https://devfeed.tech/sources/dodo-payments-blog.md>)

Topics: [API](<https://devfeed.tech/topics/api.md>), [Express](<https://devfeed.tech/topics/express.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [Node.js](<https://devfeed.tech/topics/node-js.md>), [JSON](<https://devfeed.tech/topics/json.md>), [Software as a service](<https://devfeed.tech/topics/saas.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [developer-guide](<https://devfeed.tech/tags/developer-guide.md>), [express](<https://devfeed.tech/tags/express.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [http](<https://devfeed.tech/tags/http.md>), [json](<https://devfeed.tech/tags/json.md>), [node](<https://devfeed.tech/tags/node.md>), [payment](<https://devfeed.tech/tags/payment.md>), [saas](<https://devfeed.tech/tags/saas.md>), [webhooks](<https://devfeed.tech/tags/webhooks.md>)

### AI overview

A guide to using payment webhooks instead of polling to receive payment events promptly. It explains webhook delivery, endpoint setup with Node.js and Express, event handling, retries, idempotency, and signature verification.

### Source excerpt

Learn how webhooks work for payment notifications, how to set up endpoints, verify signatures, and handle payment events reliably in your SaaS application.

## Screaming Architecture & Colocation: Let Your Project Structure Tell the Story

DevFeed: [Screaming Architecture & Colocation: Let Your Project Structure Tell the Story](<https://devfeed.tech/articles/screaming-architecture-colocation-let-your-project-structure-tell-the-story-18118.md>)

Original publisher: [Read original article](<https://thetshaped.dev/p/screaming-architecture-and-colocation-nodejs-typescript-react>)

Author: The T-Shaped Dev

Published: 2026-03-14T07:19:34Z

Content type: tutorial

Language: en

Sources: [The T-Shaped Dev](<https://devfeed.tech/sources/the-t-shaped-dev.md>)

Topics: [Code](<https://devfeed.tech/topics/code.md>), [Back end](<https://devfeed.tech/topics/backend.md>), [Node.js](<https://devfeed.tech/topics/node-js.md>), [Express](<https://devfeed.tech/topics/express.md>), [Front end](<https://devfeed.tech/topics/frontend.md>), [React](<https://devfeed.tech/topics/react.md>)

Tags: [app](<https://devfeed.tech/tags/app.md>), [architecture](<https://devfeed.tech/tags/architecture.md>), [back-end](<https://devfeed.tech/tags/back-end.md>), [code](<https://devfeed.tech/tags/code.md>), [express](<https://devfeed.tech/tags/express.md>), [front-end](<https://devfeed.tech/tags/front-end.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [project](<https://devfeed.tech/tags/project.md>), [structure](<https://devfeed.tech/tags/structure.md>), [technical](<https://devfeed.tech/tags/technical.md>), [tests](<https://devfeed.tech/tags/tests.md>)

### AI overview

This tutorial explains how to organize Node.js, TypeScript, and React projects around business capabilities rather than technical layers. It presents Screaming Architecture and colocation as ways to improve code discoverability, team ownership, change isolation, feature removal, and maintainability.

### Source excerpt

Learn why you should organize your code by what your app actually does, not by technical roles. (5 min)

## Express, Koa, Meteor, and Sails.js: A Practical Node.js Framework Comparison

DevFeed: [Express, Koa, Meteor, and Sails.js: A Practical Node.js Framework Comparison](<https://devfeed.tech/articles/express-koa-meteor-and-sails-js-a-practical-node-js-framework-comparison-17757.md>)

Original publisher: [Read original article](<https://talent500.com/blog/express-koa-meteor-sails-nodejs-framework-comparison/>)

Author: Prachi Kothiyal

Published: 2026-02-09T05:43:49Z

Content type: comparison

Language: en

Sources: [Backend Archives | Talent500 blog](<https://devfeed.tech/sources/backend-archives-talent500-blog.md>)

Topics: [Express](<https://devfeed.tech/topics/express.md>), [Framework](<https://devfeed.tech/topics/framework.md>), [Node.js](<https://devfeed.tech/topics/node-js.md>), [Koa](<https://devfeed.tech/topics/koa.md>), [Meteor](<https://devfeed.tech/topics/meteor.md>), [Development](<https://devfeed.tech/topics/development.md>), [web applications](<https://devfeed.tech/topics/web-applications.md>), [Scalability](<https://devfeed.tech/topics/scalability.md>)

Tags: [backend](<https://devfeed.tech/tags/backend.md>), [choosing-the-right-framework](<https://devfeed.tech/tags/choosing-the-right-framework.md>), [comparison](<https://devfeed.tech/tags/comparison.md>), [development](<https://devfeed.tech/tags/development.md>), [express](<https://devfeed.tech/tags/express.md>), [express-minimal-and-ubiquitous](<https://devfeed.tech/tags/express-minimal-and-ubiquitous.md>), [framework](<https://devfeed.tech/tags/framework.md>), [frameworks](<https://devfeed.tech/tags/frameworks.md>), [full-stack-development](<https://devfeed.tech/tags/full-stack-development.md>), [http](<https://devfeed.tech/tags/http.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [js](<https://devfeed.tech/tags/js.md>), [koa-modern-syntax-and-cleaner-async-flow](<https://devfeed.tech/tags/koa-modern-syntax-and-cleaner-async-flow.md>), [meteor-full-stack-real-time-and-highly-opinionated](<https://devfeed.tech/tags/meteor-full-stack-real-time-and-highly-opinionated.md>), [middleware](<https://devfeed.tech/tags/middleware.md>), [newsletters](<https://devfeed.tech/tags/newsletters.md>), [node](<https://devfeed.tech/tags/node.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [sails-js-mvc-structure-and-real-time-capabilities](<https://devfeed.tech/tags/sails-js-mvc-structure-and-real-time-capabilities.md>), [scalability](<https://devfeed.tech/tags/scalability.md>)

### AI overview

This comparison examines Express, Koa, Meteor, and Sails.js in the Node.js ecosystem, focusing on what each framework does best and how teams might choose among them based on project requirements, team experience, and long-term scalability. It describes Express as minimal and flexible, while Koa emphasizes lightweight design and cleaner asynchronous control flow.

### Source excerpt

As JavaScript has expanded from browser-only scripting to full-stack development, Node.js has become a core platform for building modern web [...] The post Express, Koa, Meteor, and Sails.js: A Practical Node.js Framework Comparison appeared first on Talent500 blog.

## Simplify development with public ports in Firebase Studio

DevFeed: [Simplify development with public ports in Firebase Studio](<https://devfeed.tech/articles/simplify-development-with-public-ports-in-firebase-studio-16615.md>)

Original publisher: [Read original article](<https://firebase.blog/posts/2025/07/firebase-studio-public-ports>)

Author: Chandra Sekhar Pydi

Published: 2025-07-01T00:00:00Z

Content type: tutorial

Language: en

Sources: [Firebase Blog](<https://devfeed.tech/sources/firebase-blog.md>)

Topics: [Firebase](<https://devfeed.tech/topics/firebase.md>), [Development](<https://devfeed.tech/topics/development.md>), [Back end](<https://devfeed.tech/topics/backend.md>), [Front end](<https://devfeed.tech/topics/frontend.md>), [Express](<https://devfeed.tech/topics/express.md>), [Node.js](<https://devfeed.tech/topics/node-js.md>), [React](<https://devfeed.tech/topics/react.md>), [web applications](<https://devfeed.tech/topics/web-applications.md>), [Web](<https://devfeed.tech/topics/web.md>), [Cross-origin resource sharing (CORS)](<https://devfeed.tech/topics/cors.md>)

Tags: [backend](<https://devfeed.tech/tags/backend.md>), [cors](<https://devfeed.tech/tags/cors.md>), [development](<https://devfeed.tech/tags/development.md>), [express](<https://devfeed.tech/tags/express.md>), [firebase](<https://devfeed.tech/tags/firebase.md>), [firebase-studio](<https://devfeed.tech/tags/firebase-studio.md>), [frontend](<https://devfeed.tech/tags/frontend.md>), [full-stack-development](<https://devfeed.tech/tags/full-stack-development.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [react](<https://devfeed.tech/tags/react.md>), [tutorials](<https://devfeed.tech/tags/tutorials.md>), [updates](<https://devfeed.tech/tags/updates.md>), [web](<https://devfeed.tech/tags/web.md>)

### AI overview

This tutorial explains how Firebase Studio public ports expose backend services and web application previews for sharing, frontend integration, feedback, and testing. It describes opening a backend port, accessing its generated public URL, and making an application preview public.

### Source excerpt

News, tutorials, and updates from the Firebase team.

## Lessons Learned from Deploying Keycloak with Angular and BFF

DevFeed: [Lessons Learned from Deploying Keycloak with Angular and BFF](<https://devfeed.tech/articles/lessons-learned-from-deploying-keycloak-with-angular-and-bff-25135.md>)

Original publisher: [Read original article](<https://blog.brakmic.com/lessons-learned-from-deploying-keycloak-with-angular-and-bff/>)

Author: brakmic

Published: 2025-01-31T18:05:38Z

Content type: tutorial

Language: en

Sources: [Harris Brakmic - Coding](<https://devfeed.tech/sources/harris-brakmic-coding.md>)

Topics: [Angular](<https://devfeed.tech/topics/angular.md>), [BFF](<https://devfeed.tech/topics/bff.md>), [Keycloak](<https://devfeed.tech/topics/keycloak.md>), [Deployment](<https://devfeed.tech/topics/deployment.md>), [Express](<https://devfeed.tech/topics/express.md>), [Back end](<https://devfeed.tech/topics/backend.md>), [Windows](<https://devfeed.tech/topics/windows.md>), [web applications](<https://devfeed.tech/topics/web-applications.md>), [OAuth 2.0](<https://devfeed.tech/topics/oauth2.md>), [OpenID connect (OIDC)](<https://devfeed.tech/topics/oidc.md>), [HTTP](<https://devfeed.tech/topics/http.md>)

Tags: [angular](<https://devfeed.tech/tags/angular.md>), [backend](<https://devfeed.tech/tags/backend.md>), [bff](<https://devfeed.tech/tags/bff.md>), [coding](<https://devfeed.tech/tags/coding.md>), [deployment](<https://devfeed.tech/tags/deployment.md>), [express](<https://devfeed.tech/tags/express.md>), [http](<https://devfeed.tech/tags/http.md>), [keycloak](<https://devfeed.tech/tags/keycloak.md>), [oauth2](<https://devfeed.tech/tags/oauth2.md>), [oidc](<https://devfeed.tech/tags/oidc.md>), [typescript](<https://devfeed.tech/tags/typescript.md>), [web](<https://devfeed.tech/tags/web.md>), [windows](<https://devfeed.tech/tags/windows.md>)

### AI overview

This article describes deploying an Angular application, an Express.js backend-for-frontend, and a Keycloak server on Windows Server with IIS. It focuses on issues that emerged when moving from a local setup to production, including session handling, secure communication, URL rewriting, TLS termination, and running Node.js inside IIS.

### Source excerpt

This article details the deployment of an Angular application, a backend-for-frontend (BFF) built with Express.js, and a Keycloak server on a Windows Server using IIS. It explores the challenges encountered when moving from a local setup to a production environment, including session handling, secure communication, and configuring KeycloakStrategy.

## Keycloak, Angular, and the BFF Pattern

DevFeed: [Keycloak, Angular, and the BFF Pattern](<https://devfeed.tech/articles/keycloak-angular-and-the-bff-pattern-25134.md>)

Original publisher: [Read original article](<https://blog.brakmic.com/keycloak-angular-and-the-bff-pattern/>)

Author: brakmic

Published: 2025-01-26T10:58:39Z

Content type: tutorial

Language: en

Sources: [Harris Brakmic - Coding](<https://devfeed.tech/sources/harris-brakmic-coding.md>)

Topics: [BFF](<https://devfeed.tech/topics/bff.md>), [Angular](<https://devfeed.tech/topics/angular.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Express](<https://devfeed.tech/topics/express.md>), [Security](<https://devfeed.tech/topics/security.md>), [web applications](<https://devfeed.tech/topics/web-applications.md>)

Tags: [angular](<https://devfeed.tech/tags/angular.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [bff](<https://devfeed.tech/tags/bff.md>), [coding](<https://devfeed.tech/tags/coding.md>), [express](<https://devfeed.tech/tags/express.md>), [keycloak](<https://devfeed.tech/tags/keycloak.md>), [oauth2](<https://devfeed.tech/tags/oauth2.md>), [oidc](<https://devfeed.tech/tags/oidc.md>), [pkce](<https://devfeed.tech/tags/pkce.md>), [security](<https://devfeed.tech/tags/security.md>), [typescript](<https://devfeed.tech/tags/typescript.md>), [web](<https://devfeed.tech/tags/web.md>), [web-applications](<https://devfeed.tech/tags/web-applications.md>)

### AI overview

This tutorial explains how to use the Backend for Frontend pattern with Angular, Express.js, and Keycloak to secure a web application. It describes handling OAuth2 and PKCE authentication flows server-side, storing tokens in server-side sessions, and keeping sensitive data out of the browser.

### Source excerpt

This article explains implementing the BFF pattern with Angular, Express.js, and Keycloak to secure web applications. Learn how to handle authentication flows server-side, eliminate client-side token storage, and maintain separation between frontend and security operations. Includes practical configuration steps for Keycloak realms, Express.js sessions, and Angular's authentication service.

## How to Set Up Row-Level Security in Postgres Using AWS Cognito

DevFeed: [How to Set Up Row-Level Security in Postgres Using AWS Cognito](<https://devfeed.tech/articles/how-to-set-up-row-level-security-in-postgres-using-aws-cognito-5402.md>)

Original publisher: [Read original article](<https://neon.com/blog/how-to-set-up-row-level-security-in-postgres-using-aws-cognito>)

Author: Brian Holt

Published: 2024-12-04T17:26:16Z

Content type: tutorial

Language: en

Sources: [Blog -- Neon Docs](<https://devfeed.tech/sources/blog-neon-docs.md>)

Topics: [Authorization](<https://devfeed.tech/topics/authorization.md>), [Databases](<https://devfeed.tech/topics/databases.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [JSON Web Tokens](<https://devfeed.tech/topics/jwt.md>), [SQL](<https://devfeed.tech/topics/sql.md>), [Express](<https://devfeed.tech/topics/express.md>), [htmx](<https://devfeed.tech/topics/htmx.md>), [MFA](<https://devfeed.tech/topics/mfa.md>), [Serverless](<https://devfeed.tech/topics/serverless.md>), [App](<https://devfeed.tech/topics/app.md>)

Tags: [authentication](<https://devfeed.tech/tags/authentication.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [blog-post](<https://devfeed.tech/tags/blog-post.md>), [community](<https://devfeed.tech/tags/community.md>), [database](<https://devfeed.tech/tags/database.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [htmx](<https://devfeed.tech/tags/htmx.md>), [http](<https://devfeed.tech/tags/http.md>), [postgres](<https://devfeed.tech/tags/postgres.md>), [product](<https://devfeed.tech/tags/product.md>), [security](<https://devfeed.tech/tags/security.md>), [serverless](<https://devfeed.tech/tags/serverless.md>)

### AI overview

A tutorial for implementing Postgres row-level security with AWS Cognito authorization. It demonstrates a serverless app using Neon, Neon Authorize, Express.js, and HTMX, including JWT-based fine-grained access controls and RLS policy setup.

### Source excerpt

This blog post teaches you an easy method to implement row-level security in your Postgres database when using AWS Cognito for authorization. To demonstrate everything, we'll be using an app with Neon as the Postgres provider, Neon Authorize, Express.js, and HTMX. All the code in...

## Securing APIs: Express rate limit and slow down

DevFeed: [Securing APIs: Express rate limit and slow down](<https://devfeed.tech/articles/securing-apis-express-rate-limit-and-slow-down-4115.md>)

Original publisher: [Read original article](<https://developer.mozilla.org/en-US/blog/securing-apis-express-rate-limit-and-slow-down/>)

Author: vultr

Published: 2024-05-28T00:00:00Z

Content type: tutorial

Language: en

Sources: [MDN Blog](<https://devfeed.tech/sources/mdn-blog.md>)

Topics: [Express](<https://devfeed.tech/topics/express.md>), [Security](<https://devfeed.tech/topics/security.md>), [Node.js](<https://devfeed.tech/topics/node-js.md>), [web applications](<https://devfeed.tech/topics/web-applications.md>), [DDoS](<https://devfeed.tech/topics/ddos.md>), [Firewall](<https://devfeed.tech/topics/firewall.md>), [Bash](<https://devfeed.tech/topics/bash.md>), [ssh](<https://devfeed.tech/topics/ssh.md>), [HTML](<https://devfeed.tech/topics/html.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>)

Tags: [bash](<https://devfeed.tech/tags/bash.md>), [ddos](<https://devfeed.tech/tags/ddos.md>), [firewall](<https://devfeed.tech/tags/firewall.md>), [guide](<https://devfeed.tech/tags/guide.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [security](<https://devfeed.tech/tags/security.md>), [ssh](<https://devfeed.tech/tags/ssh.md>), [web-applications](<https://devfeed.tech/tags/web-applications.md>)

### AI overview

This tutorial explains how to secure Express applications by implementing rate limiting and slow-down mechanisms. It covers deploying an application on a server, configuring firewall access, and using these controls to improve resilience, scalability, security, and service reliability.

### Source excerpt

This guide introduces you to rate limits and slow down mechanisms. Learn how to apply slow down and rate limit mechanisms in Express applications.

## Preventing broken access control in express Node.js applications

DevFeed: [Preventing broken access control in express Node.js applications](<https://devfeed.tech/articles/preventing-broken-access-control-in-express-node-js-applications-8049.md>)

Original publisher: [Read original article](<https://snyk.io/blog/preventing-broken-access-control-express-node-js/>)

Author: Ben Smitthimedhin

Published: 2024-05-22T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Access Control](<https://devfeed.tech/topics/access-control.md>), [Express](<https://devfeed.tech/topics/express.md>), [Node.js](<https://devfeed.tech/topics/node-js.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [web applications](<https://devfeed.tech/topics/web-applications.md>), [Back end](<https://devfeed.tech/topics/backend.md>), [Code](<https://devfeed.tech/topics/code.md>)

Tags: [access-control](<https://devfeed.tech/tags/access-control.md>), [acquisition](<https://devfeed.tech/tags/acquisition.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [backend](<https://devfeed.tech/tags/backend.md>), [blog](<https://devfeed.tech/tags/blog.md>), [code](<https://devfeed.tech/tags/code.md>), [code-security](<https://devfeed.tech/tags/code-security.md>), [developer](<https://devfeed.tech/tags/developer.md>), [draftdotdev](<https://devfeed.tech/tags/draftdotdev.md>), [express](<https://devfeed.tech/tags/express.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [js](<https://devfeed.tech/tags/js.md>), [middleware](<https://devfeed.tech/tags/middleware.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [open-source-security](<https://devfeed.tech/tags/open-source-security.md>), [snyk-code](<https://devfeed.tech/tags/snyk-code.md>), [snyk-open-source](<https://devfeed.tech/tags/snyk-open-source.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>), [web-applications](<https://devfeed.tech/tags/web-applications.md>)

### AI overview

This article explains broken access control in backend Node.js applications built with Express. It describes how flawed authorization rules can expose private data, permit restricted actions, or allow privilege escalation, and introduces code examples of vertical access control vulnerabilities such as unprotected administrative routes.

### Source excerpt

In this article, you'll learn more about broken access control in Node.js applications and strategies to prevent such vulnerabilities when building web applications based on the Express web framework.

## Preventing SQL injection attacks in Node.js

DevFeed: [Preventing SQL injection attacks in Node.js](<https://devfeed.tech/articles/preventing-sql-injection-attacks-in-node-js-8051.md>)

Original publisher: [Read original article](<https://snyk.io/blog/preventing-sql-injection-attacks-node-js/>)

Author: Lucien Chemaly

Published: 2024-02-20T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Node.js](<https://devfeed.tech/topics/node-js.md>), [Security](<https://devfeed.tech/topics/security.md>), [SQL](<https://devfeed.tech/topics/sql.md>), [Express](<https://devfeed.tech/topics/express.md>), [PostgreSQL](<https://devfeed.tech/topics/postgresql.md>), [Sanitization](<https://devfeed.tech/topics/sanitization.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [web applications](<https://devfeed.tech/topics/web-applications.md>)

Tags: [acquisition](<https://devfeed.tech/tags/acquisition.md>), [application-security](<https://devfeed.tech/tags/application-security.md>), [attacks](<https://devfeed.tech/tags/attacks.md>), [blog](<https://devfeed.tech/tags/blog.md>), [code-security](<https://devfeed.tech/tags/code-security.md>), [developer](<https://devfeed.tech/tags/developer.md>), [draftdotdev](<https://devfeed.tech/tags/draftdotdev.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [node](<https://devfeed.tech/tags/node.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [postgresql](<https://devfeed.tech/tags/postgresql.md>), [security](<https://devfeed.tech/tags/security.md>), [server](<https://devfeed.tech/tags/server.md>), [snyk](<https://devfeed.tech/tags/snyk.md>), [snyk-code](<https://devfeed.tech/tags/snyk-code.md>), [snyk-open-source](<https://devfeed.tech/tags/snyk-open-source.md>), [sql](<https://devfeed.tech/tags/sql.md>), [validation](<https://devfeed.tech/tags/validation.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

### AI overview

This article explains how SQL injection attacks affect Node.js applications when user input is incorporated into SQL queries without proper validation, sanitization, or safe query construction. It demonstrates the issue with an Express application connected to PostgreSQL and introduces ways to protect applications from unauthorized access and data leakage.

### Source excerpt

In this article, you'll learn more about why SQL injection attacks pose a significant threat and how to shield your Node.js applications against them.

## Working with ChatGPT Functions on Heroku

DevFeed: [Working with ChatGPT Functions on Heroku](<https://devfeed.tech/articles/working-with-chatgpt-functions-on-heroku-26509.md>)

Original publisher: [Read original article](<https://www.heroku.com/blog/working-with-chatgpt-functions-on-heroku/>)

Author: Julián Duque

Published: 2024-01-30T15:00:00Z

Content type: tutorial

Language: en

Sources: [Heroku](<https://devfeed.tech/sources/heroku.md>)

Topics: [Heroku](<https://devfeed.tech/topics/heroku.md>), [OpenAI](<https://devfeed.tech/topics/openai.md>), [Node.js](<https://devfeed.tech/topics/node-js.md>), [API](<https://devfeed.tech/topics/api.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [Express](<https://devfeed.tech/topics/express.md>), [React](<https://devfeed.tech/topics/react.md>), [monorepo](<https://devfeed.tech/topics/monorepo.md>), [web applications](<https://devfeed.tech/topics/web-applications.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [ai-machine-learning](<https://devfeed.tech/tags/ai-machine-learning.md>), [apis](<https://devfeed.tech/tags/apis.md>), [back-end](<https://devfeed.tech/tags/back-end.md>), [chatgpt](<https://devfeed.tech/tags/chatgpt.md>), [deploy](<https://devfeed.tech/tags/deploy.md>), [developer-tools](<https://devfeed.tech/tags/developer-tools.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [express](<https://devfeed.tech/tags/express.md>), [front-end](<https://devfeed.tech/tags/front-end.md>), [generative-ai](<https://devfeed.tech/tags/generative-ai.md>), [github](<https://devfeed.tech/tags/github.md>), [heroku](<https://devfeed.tech/tags/heroku.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [monorepo](<https://devfeed.tech/tags/monorepo.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [openai](<https://devfeed.tech/tags/openai.md>), [react](<https://devfeed.tech/tags/react.md>), [web](<https://devfeed.tech/tags/web.md>)

### AI overview

A tutorial showing how to build a Node.js Menu Maker application that uses OpenAI's Chat Completions API and function calling, with a React front end and Express back end, and deploys the application on Heroku.

### Source excerpt

How to Build and Deploy a Node.js App That Uses OpenAI's APIs Near the end of 2023, ChatGPT announced that it had 100M weekly users. That's a massive base of users who want to take advantage of the convenience and power of intelligent question answering with natural language. With this level of popularity for ChatGPT, [...] The post Working with ChatGPT Functions on Heroku appeared first on Heroku.

## Mobile app prototyping with Quasar and SQLite

DevFeed: [Mobile app prototyping with Quasar and SQLite](<https://devfeed.tech/articles/mobile-app-prototyping-with-quasar-and-sqlite-6005.md>)

Original publisher: [Read original article](<https://turso.tech/blog/mobile-app-prototyping-with-quasar-and-sqlite-5a41ef5b>)

Author: James Sinkala

Published: 2024-01-05T00:00:00Z

Content type: tutorial

Language: en

Sources: [Turso Blog](<https://devfeed.tech/sources/turso-blog.md>)

Topics: [Mobile](<https://devfeed.tech/topics/mobile.md>), [Quasar](<https://devfeed.tech/topics/quasar.md>), [SQLite](<https://devfeed.tech/topics/sqlite.md>), [Express](<https://devfeed.tech/topics/express.md>), [libSQL](<https://devfeed.tech/topics/libsql.md>), [Turso](<https://devfeed.tech/topics/turso.md>), [Vue.js](<https://devfeed.tech/topics/vue.md>), [migration](<https://devfeed.tech/topics/migration.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [Vite](<https://devfeed.tech/topics/vite.md>)

Tags: [development](<https://devfeed.tech/tags/development.md>), [libsql](<https://devfeed.tech/tags/libsql.md>), [migration](<https://devfeed.tech/tags/migration.md>), [mobile](<https://devfeed.tech/tags/mobile.md>), [offline](<https://devfeed.tech/tags/offline.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [prototyping](<https://devfeed.tech/tags/prototyping.md>), [quasar](<https://devfeed.tech/tags/quasar.md>), [sqlite](<https://devfeed.tech/tags/sqlite.md>), [turso](<https://devfeed.tech/tags/turso.md>), [vite](<https://devfeed.tech/tags/vite.md>), [vue](<https://devfeed.tech/tags/vue.md>), [vue-js](<https://devfeed.tech/tags/vue-js.md>)

### AI overview

A tutorial series demonstrates building a recipe-book mobile app prototype with Quasar, Vue.js, and SQLite. It uses a local SQLite file for offline development, an Express server and the libSQL JavaScript SDK for database access, and explains how to migrate the database to Turso for production and global distribution.

### Source excerpt

Build quick mobile application prototypes using the Quasar framework and SQLite.

## Deploying Node.js applications with PM2 on Vultr

DevFeed: [Deploying Node.js applications with PM2 on Vultr](<https://devfeed.tech/articles/deploying-node-js-applications-with-pm2-on-vultr-4044.md>)

Original publisher: [Read original article](<https://developer.mozilla.org/en-US/blog/deploying-node-js-applications-with-pm2-on-vultr/>)

Author: vultr

Published: 2023-11-08T00:00:00Z

Content type: tutorial

Language: en

Sources: [MDN Blog](<https://devfeed.tech/sources/mdn-blog.md>)

Topics: [Node.js](<https://devfeed.tech/topics/node-js.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [nginx](<https://devfeed.tech/topics/nginx.md>), [SSL](<https://devfeed.tech/topics/ssl.md>), [Security](<https://devfeed.tech/topics/security.md>), [Express](<https://devfeed.tech/topics/express.md>), [Cloud](<https://devfeed.tech/topics/cloud.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>), [npm](<https://devfeed.tech/topics/npm.md>)

Tags: [cli](<https://devfeed.tech/tags/cli.md>), [express](<https://devfeed.tech/tags/express.md>), [http](<https://devfeed.tech/tags/http.md>), [load-balancing](<https://devfeed.tech/tags/load-balancing.md>), [nginx](<https://devfeed.tech/tags/nginx.md>), [node](<https://devfeed.tech/tags/node.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [npm](<https://devfeed.tech/tags/npm.md>), [security](<https://devfeed.tech/tags/security.md>), [ssl](<https://devfeed.tech/tags/ssl.md>)

### AI overview

A tutorial on deploying Node.js applications on a Vultr Cloud Compute server with PM2. It covers persistent services, PM2 cluster mode, automatic restarts, Nginx reverse-proxy configuration, load balancing, and SSL-based HTTPS security.

### Source excerpt

Learn how to deploy a Node.js application on Vultr using PM2 to create persistent services. This guide shows how to efficiently use resources via PM2 cluster mode. It also covers Nginx server setup and SSL security.

[Next page](<https://devfeed.tech/topics/express.md?cursor=WyIyMDIzLTExLTA4VDAwOjAwOjAwKzAwOjAwIiwgIjliMmJmNjg4LTE1OWQtNGVmMS05MGFlLWE5NjhlODRhNWJmYyJd>)