Backend Development Skill
Production-ready backend development with 2025 best practices and code patterns.
Quick Decision Matrix
| Need |
Choose |
| Fast development |
Node.js + NestJS |
| Data/ML/AI |
Python + FastAPI |
| High concurrency |
Go + Gin |
| Max performance |
Rust + Axum |
| Edge/Serverless |
Hono / Elysia |
| ACID transactions |
PostgreSQL 17 |
| Flexible schema |
MongoDB |
| Caching/Sessions |
Redis |
| Internal APIs |
gRPC |
| Public APIs |
REST / GraphQL |
| Type-safe fullstack |
tRPC |
Implementation Checklist
[ ] API Design (references/api-design.md)
[ ] Authentication (references/authentication.md)
[ ] Database setup (references/databases.md)
[ ] Security hardening (references/security.md)
[ ] Observability (references/observability.md)
[ ] Testing strategy (references/testing.md)
[ ] DevOps/CI-CD (references/devops.md)
2025 Key Updates
| Area |
2025 Best Practice |
| Auth |
OAuth 2.1 + PKCE mandatory, Passkeys/WebAuthn |
| Security |
OWASP 2025, Zero Trust Architecture |
| DB |
PostgreSQL 17, pgvector for AI, serverless DBs |
| Observability |
OpenTelemetry standard |
| Frameworks |
Hono, Elysia for edge; Effect-TS for FP |
| AI Integration |
LLMs as probabilistic components |
Core Patterns (2025)
API: REST (CRUD) → GraphQL (complex) → gRPC (microservices) → tRPC (TypeScript)
Auth: OAuth 2.1 + PKCE → Passkeys → JWT (short-lived) → Refresh rotation
DB: Connection pooling → Indexing → Read replicas → Sharding
Security: Zero Trust → Input validation → Parameterized queries → Rate limiting
Testing: Unit 70% → Integration 20% → E2E 10% → Contract tests
Reference Navigation
API & Architecture:
references/api-design.md - REST, GraphQL, gRPC, tRPC patternsreferences/architecture.md - Microservices, serverless, event-driven
Security & Auth:
references/security.md - OWASP 2025, Zero Trust, input validationreferences/authentication.md - OAuth 2.1, Passkeys, JWT, sessions
Data & Performance:
references/databases.md - PostgreSQL, MongoDB, Redis patternsreferences/performance.md - Caching, optimization, scaling
Quality & Operations:
references/testing.md - Testing pyramid, frameworks, CI integrationreferences/devops.md - Docker, K8s, CI/CD, monitoringreferences/observability.md - OpenTelemetry, tracing, logging
Code Patterns:
references/code-patterns.md - Latest approach snippets for planners
Resources
1---2name: backend-development-53description: Build robust backend systems with modern technologies (Node.js, Python, Go, Rust), frameworks (NestJS, FastAPI, Django), databases (PostgreSQL, MongoDB, Redis), APIs (REST, GraphQL, gRPC), authentication (OAuth 2.1, JWT), testing strategies, security best practices (OWASP Top 10), performance optimization, scalability patterns (microservices, caching, sharding), DevOps practices (Docker, Kubernetes, CI/CD), and monitoring. Use when designing APIs, implementing authentication, optimizing database queries, setting up CI/CD pipelines, handling security vulnerabilities, building microservices, or developing production-ready backend systems.4license: MIT5---6
7# Backend Development Skill
8
9Production-ready backend development with 2025 best practices and code patterns.
10
11## Quick Decision Matrix
12
13| Need | Choose |
14|------|--------|
15| Fast development | Node.js + NestJS |
16| Data/ML/AI | Python + FastAPI |
17| High concurrency | Go + Gin |
18| Max performance | Rust + Axum |
19| Edge/Serverless | Hono / Elysia |
20| ACID transactions | PostgreSQL 17 |
21| Flexible schema | MongoDB |
22| Caching/Sessions | Redis |
23| Internal APIs | gRPC |
24| Public APIs | REST / GraphQL |
25| Type-safe fullstack | tRPC |
26
27## Implementation Checklist
28
29```
30[ ] API Design (references/api-design.md)
31[ ] Authentication (references/authentication.md)
32[ ] Database setup (references/databases.md)
33[ ] Security hardening (references/security.md)
34[ ] Observability (references/observability.md)
35[ ] Testing strategy (references/testing.md)
36[ ] DevOps/CI-CD (references/devops.md)
37```
38
39## 2025 Key Updates
40
41| Area | 2025 Best Practice |
42|------|-------------------|
43| Auth | OAuth 2.1 + PKCE mandatory, Passkeys/WebAuthn |
44| Security | OWASP 2025, Zero Trust Architecture |
45| DB | PostgreSQL 17, pgvector for AI, serverless DBs |
46| Observability | OpenTelemetry standard |
47| Frameworks | Hono, Elysia for edge; Effect-TS for FP |
48| AI Integration | LLMs as probabilistic components |
49
50## Core Patterns (2025)
51
52**API:** REST (CRUD) → GraphQL (complex) → gRPC (microservices) → tRPC (TypeScript)
53
54**Auth:** OAuth 2.1 + PKCE → Passkeys → JWT (short-lived) → Refresh rotation
55
56**DB:** Connection pooling → Indexing → Read replicas → Sharding
57
58**Security:** Zero Trust → Input validation → Parameterized queries → Rate limiting
59
60**Testing:** Unit 70% → Integration 20% → E2E 10% → Contract tests
61
62## Reference Navigation
63
64**API & Architecture:**
65- `references/api-design.md` - REST, GraphQL, gRPC, tRPC patterns
66- `references/architecture.md` - Microservices, serverless, event-driven
67
68**Security & Auth:**
69- `references/security.md` - OWASP 2025, Zero Trust, input validation
70- `references/authentication.md` - OAuth 2.1, Passkeys, JWT, sessions
71
72**Data & Performance:**
73- `references/databases.md` - PostgreSQL, MongoDB, Redis patterns
74- `references/performance.md` - Caching, optimization, scaling
75
76**Quality & Operations:**
77- `references/testing.md` - Testing pyramid, frameworks, CI integration
78- `references/devops.md` - Docker, K8s, CI/CD, monitoring
79- `references/observability.md` - OpenTelemetry, tracing, logging
80
81**Code Patterns:**
82- `references/code-patterns.md` - Latest approach snippets for planners
83
84## Resources
85
86- OWASP Top 10 2025: https://owasp.org/Top10/
87- OAuth 2.1: https://oauth.net/2.1/
88- OpenTelemetry: https://opentelemetry.io/
89- PostgreSQL 17: https://www.postgresql.org/docs/17/
diegosouzapw