Backend Development Skill
Production-ready backend development with modern technologies, best practices, and proven patterns.
When to Use
- Designing RESTful, GraphQL, or gRPC APIs
- Building authentication/authorization systems
- Optimizing database queries and schemas
- Implementing caching and performance optimization
- OWASP Top 10 security mitigation
- Designing scalable microservices
- Testing strategies (unit, integration, E2E)
- CI/CD pipelines and deployment
- Monitoring and debugging production systems
Technology Selection Guide
Languages: Node.js/TypeScript (full-stack), Python (data/ML), Go (concurrency), Rust (performance)
Frameworks: NestJS, FastAPI, Django, Express, Gin
Databases: PostgreSQL (ACID), MongoDB (flexible schema), Redis (caching)
APIs: REST (simple), GraphQL (flexible), gRPC (performance)
See: references/backend-technologies.md for detailed comparisons
Reference Navigation
Core Technologies:
backend-technologies.md - Languages, frameworks, databases, message queues, ORMsbackend-api-design.md - REST, GraphQL, gRPC patterns and best practices
Security & Authentication:
backend-security.md - OWASP Top 10 2025, security best practices, input validationbackend-authentication.md - OAuth 2.1, JWT, RBAC, MFA, session management
Performance & Architecture:
backend-performance.md - Caching, query optimization, load balancing, scalingbackend-architecture.md - Microservices, event-driven, CQRS, saga patterns
Quality & Operations:
backend-testing.md - Testing strategies, frameworks, tools, CI/CD testingbackend-code-quality.md - SOLID principles, design patterns, clean codebackend-devops.md - Docker, Kubernetes, deployment strategies, monitoringbackend-debugging.md - Debugging strategies, profiling, logging, production debuggingbackend-mindset.md - Problem-solving, architectural thinking, collaboration
Key Best Practices (2025)
Security: Argon2id passwords, parameterized queries (98% SQL injection reduction), OAuth 2.1 + PKCE, rate limiting, security headers
Performance: Redis caching (90% DB load reduction), database indexing (30% I/O reduction), CDN (50%+ latency cut), connection pooling
Testing: 70-20-10 pyramid (unit-integration-E2E), Vitest 50% faster than Jest, contract testing for microservices, 83% migrations fail without tests
DevOps: Blue-green/canary deployments, feature flags (90% fewer failures), Kubernetes 84% adoption, Prometheus/Grafana monitoring, OpenTelemetry tracing
Quick Decision Matrix
| Need |
Choose |
| Fast development |
Node.js + NestJS |
| Data/ML integration |
Python + FastAPI |
| High concurrency |
Go + Gin |
| Max performance |
Rust + Axum |
| ACID transactions |
PostgreSQL |
| Flexible schema |
MongoDB |
| Caching |
Redis |
| Internal services |
gRPC |
| Public APIs |
GraphQL/REST |
| Real-time events |
Kafka |
Implementation Checklist
API: Choose style → Design schema → Validate input → Add auth → Rate limiting → Documentation → Error handling
Database: Choose DB → Design schema → Create indexes → Connection pooling → Migration strategy → Backup/restore → Test performance
Security: OWASP Top 10 → Parameterized queries → OAuth 2.1 + JWT → Security headers → Rate limiting → Input validation → Argon2id passwords
Testing: Unit 70% → Integration 20% → E2E 10% → Load tests → Migration tests → Contract tests (microservices)
Deployment: Docker → CI/CD → Blue-green/canary → Feature flags → Monitoring → Logging → Health checks
Resources
1---2name: backend-development-23description: Production backend systems development. Stack: Node.js/TypeScript, Python, Go, Rust | NestJS, FastAPI, Django, Express | PostgreSQL, MongoDB, Redis. Capabilities: REST/GraphQL/gRPC APIs, OAuth 2.1/JWT auth, OWASP security, microservices, caching, load balancing, Docker/K8s deployment. Actions: design, build, implement, secure, optimize, deploy, test APIs and services. Keywords: API design, REST, GraphQL, gRPC, authentication, OAuth, JWT, RBAC, database, PostgreSQL, MongoDB, Redis, caching, microservices, Docker, Kubernetes, CI/CD, OWASP, security, performance, scalability, NestJS, FastAPI, Express, middleware, rate limiting. Use when: designing APIs, implementing auth/authz, optimizing queries, building microservices, securing endpoints, deploying containers, setting up CI/CD.4license: MIT5---6
7# Backend Development Skill
8
9Production-ready backend development with modern technologies, best practices, and proven patterns.
10
11## When to Use
12
13- Designing RESTful, GraphQL, or gRPC APIs
14- Building authentication/authorization systems
15- Optimizing database queries and schemas
16- Implementing caching and performance optimization
17- OWASP Top 10 security mitigation
18- Designing scalable microservices
19- Testing strategies (unit, integration, E2E)
20- CI/CD pipelines and deployment
21- Monitoring and debugging production systems
22
23## Technology Selection Guide
24
25**Languages:** Node.js/TypeScript (full-stack), Python (data/ML), Go (concurrency), Rust (performance)
26**Frameworks:** NestJS, FastAPI, Django, Express, Gin
27**Databases:** PostgreSQL (ACID), MongoDB (flexible schema), Redis (caching)
28**APIs:** REST (simple), GraphQL (flexible), gRPC (performance)
29
30See: `references/backend-technologies.md` for detailed comparisons
31
32## Reference Navigation
33
34**Core Technologies:**
35- `backend-technologies.md` - Languages, frameworks, databases, message queues, ORMs
36- `backend-api-design.md` - REST, GraphQL, gRPC patterns and best practices
37
38**Security & Authentication:**
39- `backend-security.md` - OWASP Top 10 2025, security best practices, input validation
40- `backend-authentication.md` - OAuth 2.1, JWT, RBAC, MFA, session management
41
42**Performance & Architecture:**
43- `backend-performance.md` - Caching, query optimization, load balancing, scaling
44- `backend-architecture.md` - Microservices, event-driven, CQRS, saga patterns
45
46**Quality & Operations:**
47- `backend-testing.md` - Testing strategies, frameworks, tools, CI/CD testing
48- `backend-code-quality.md` - SOLID principles, design patterns, clean code
49- `backend-devops.md` - Docker, Kubernetes, deployment strategies, monitoring
50- `backend-debugging.md` - Debugging strategies, profiling, logging, production debugging
51- `backend-mindset.md` - Problem-solving, architectural thinking, collaboration
52
53## Key Best Practices (2025)
54
55**Security:** Argon2id passwords, parameterized queries (98% SQL injection reduction), OAuth 2.1 + PKCE, rate limiting, security headers
56
57**Performance:** Redis caching (90% DB load reduction), database indexing (30% I/O reduction), CDN (50%+ latency cut), connection pooling
58
59**Testing:** 70-20-10 pyramid (unit-integration-E2E), Vitest 50% faster than Jest, contract testing for microservices, 83% migrations fail without tests
60
61**DevOps:** Blue-green/canary deployments, feature flags (90% fewer failures), Kubernetes 84% adoption, Prometheus/Grafana monitoring, OpenTelemetry tracing
62
63## Quick Decision Matrix
64
65| Need | Choose |
66|------|--------|
67| Fast development | Node.js + NestJS |
68| Data/ML integration | Python + FastAPI |
69| High concurrency | Go + Gin |
70| Max performance | Rust + Axum |
71| ACID transactions | PostgreSQL |
72| Flexible schema | MongoDB |
73| Caching | Redis |
74| Internal services | gRPC |
75| Public APIs | GraphQL/REST |
76| Real-time events | Kafka |
77
78## Implementation Checklist
79
80**API:** Choose style → Design schema → Validate input → Add auth → Rate limiting → Documentation → Error handling
81
82**Database:** Choose DB → Design schema → Create indexes → Connection pooling → Migration strategy → Backup/restore → Test performance
83
84**Security:** OWASP Top 10 → Parameterized queries → OAuth 2.1 + JWT → Security headers → Rate limiting → Input validation → Argon2id passwords
85
86**Testing:** Unit 70% → Integration 20% → E2E 10% → Load tests → Migration tests → Contract tests (microservices)
87
88**Deployment:** Docker → CI/CD → Blue-green/canary → Feature flags → Monitoring → Logging → Health checks
89
90## Resources
91
92- OWASP Top 10: https://owasp.org/www-project-top-ten/
93- OAuth 2.1: https://oauth.net/2.1/
94- OpenTelemetry: https://opentelemetry.io/
majiayu000