Jubayer Shikder

Rate limiting isn't about stopping attackers. Most of the time it's about stopping your most enthusiastic user from accidentally taking your database down by refreshing a page 200 times because it felt slow. Protect yourself from your best users too. #backend #startups #SaaS

Someone asked me today why their app "feels laggy" even though their frontend is fast and their DB queries are fast individually. Usually it's not one slow thing. It's 40 fast things happening one after another instead of at once. Death by a thousand round trips. #webdev #nodejs #backend

@Sahil250199 Using bucketCounter % 100 makes bucketing stateful and dependent on request order. A user will flip buckets on subsequent hits. Calculate the hash deterministically: Math.abs(Objects.hash(userId, flagId)) % 100. That guarantees stateless consistency across rollouts.

Unearthing the unseen bug: unstable user bucketing broke rollout consistency. Priority order and environment isolation matter more than you think. gronex.org/problems/featu… #backend

@harshitabuilds @antonosika @amasad @MaorShlomo The agent broke it because it lacks context on state boundaries. Don't let it touch config files directly. Explicitly isolate your backend logic behind strict API contracts (JSON schemas) so client changes cannot structurally break the server.

Day 6 (Extended) Vibe coding as a non-tech founder:Prompting is the only easy part btw ✅ Shipped a better product ❌ Broke the app 📚 Learnt config.js, manifest.json, localhost & frontend ↔ backend. Is this the normal learning curve? @antonosika @amasad @MaorShlomo

@DarayuthH Treat the redirect purely as UI decoration, and let the asynchronous checkout.session.completed webhook act as the single source of truth for fulfillment.

@DarayuthH Relying purely on the client redirecting to the success URL to confirm state is a major vulnerability anyway. If the user closes the tab before the redirect hits your route, your database never updates.

If ur Stripe localhost webhook isn't triggering, check ur success_url. I forgot to add session_id={CHECKOUT_SESSION_ID} and spent hours debugging. 😅 In my setup, without it, the webhook never triggered. 😆

@dulelicanin State transitions must explicitly validate the event timestamp or sequence ID against the current database record before committing.

@dulelicanin Standard state machines fail here because webhooks can arrive out of chronological order. If your backend processes an old invoice.payment_failed after a newer customer.subscription.updated (active), you lock out paying users.

A subscription looked like the simplest model in the app. A boolean, basically: are they paying or not. Then a past-due customer kept full access for two weeks, and a trialing one got locked out of the exact thing the trial was meant to sell. Same root cause. Stripe moves a subscription through eight distinct states, and I'd flattened all of them into one column my code checked in a dozen places. The rebuild had nothing to do with webhooks, which I already had. The real work was deciding, per feature, which of those states should grant access, then making the webhook the only writer of that status. No more guessing up in the UI layer. Full breakdown of the lifecycle here: duskolicanin.com/blog/saas-subs…

@IvanBalias @dulelicanin (e.g., immediate hard stops on stolen cards vs. delayed retries on temporary insufficient funds).

@IvanBalias @dulelicanin It triggers fraud filters immediately. Card networks flag velocity and repeat declines on the same footprint. You need an exponential backoff strategy paired with explicit decline-code routing

First week on here properly. Quick context: I do backend. Not the fun part people show off — the part that decides whether your app survives its first real Tuesday. Spent today debugging a payment that charged a user twice because a retry didn't check if the first charge already went through. Five lines of code. Would've cost someone real money if it shipped. #buildinpublic #backend #webdev

Good Morning ☀️

@sanidhya_eth @amazon Oyeee kya phoda hai yrr! Congratulations!!

Career Update : Joined @amazon as an SDE Intern in Bangalore.

@adxtyahq @getsupermoney Dropping in again?

Thanks @getsupermoney for the ₹0.63 cashback on my ₹3.73L payment

Proof when you give it all, doors finally open. Bro, Neverrrrrrrrrrrrrrrrrrrr up.

what if i told you the path to greatness isn’t easy.

watching people of my age enjoying life while I'm still trying to fix my money and future.

In 100 years, everyone reading this will be dead. Their problems, worries, and opinions won't matter. Neither will yours. Think of it like a delayed universal blank slate - yours to paint as you see fit.