A walk through token bucket, sliding window, and leaky bucket — and why the choice of algorithm is the smallest part of a distributed rate-limiting design.
Hardening the front door of a backend: protecting third-party keys behind a proxy, JWT/OIDC verification, RBAC, and signed outbound IPNs with replay protection.
Bank-integrated payments demand more than idempotent endpoints — virtual accounts, dynamic fee calculation, IPN-driven state machines, and reconciliation that survives SFTP quirks.
Cross-cutting lessons from production backend work: ownership of shared libraries, changing one hot path at a time, observability before scaling, and contract-driven integration.