backend-coding

SKILL.md

Build production-ready backend services with proper architecture, security, performance optimization, and testing.

Never trust user input - Validate everything Use parameterized queries - Prevent SQL injection Hash passwords - bcrypt with cost factor 12+, never store plain text Expire tokens quickly - 15min access tokens, 7day refresh tokens Use HTTPS only - TLS 1.3 minimum

Cache frequently accessed data - Redis with appropriate TTL (typically 1 hour) Use database indexes - On all query columns Paginate large result sets - Max 100 items per page Use connection pooling - 10-20 connections Async operations for I/O - Don't block the event loop

专家后端开发指南，涵盖 Node.js、Python、Java、Go、API 设计 (REST/GraphQL/gRPC)、数据库模式、身份验证、缓存、消息队列、微服务和测试。使用行业最佳实践生成生产就绪、可扩展且安全的后端代码。在构建 API、实现业务逻辑、设计数据模型、集成服务或用户提到后端开发、服务器端代码、API、数据库或微服务时使用。 来源：dauquangthanh/hanoi-rainbow。

查看原文