Notes on software engineering from Robert Stoia — practical guides on backend, mobile, and web development.https://robertstoia.dev/https://robertstoia.dev/writing/refresh-token-rotation/https://robertstoia.dev/writing/refresh-token-rotation/Explore refresh token rotation in Node.js, secure cookies, reuse detection, token-family revocation, and PostgreSQL cleanup with pg_cron.Mon, 22 Jun 2026 00:00:00 GMThttps://robertstoia.dev/writing/role-based-authentication/https://robertstoia.dev/writing/role-based-authentication/Build role-based authorization in Express with a permission map, reusable middleware, protected routes, and ownership checks.Thu, 11 Jun 2026 00:00:00 GMThttps://robertstoia.dev/writing/database-rls-policies/https://robertstoia.dev/writing/database-rls-policies/Understand PostgreSQL row-level security, operation-specific policies, user context, and separate roles for privileged database access.Thu, 04 Jun 2026 00:00:00 GMThttps://robertstoia.dev/writing/http-caching/https://robertstoia.dev/writing/http-caching/Learn how HTTP caching works with private and shared caches, Cache-Control, ETag, conditional requests, and a NestJS example.Fri, 16 Aug 2024 00:00:00 GMThttps://robertstoia.dev/writing/nestjs-idempotent-key/https://robertstoia.dev/writing/nestjs-idempotent-key/Explore idempotency in a NestJS REST API using request keys, middleware, TypeORM transactions, and related database entities.Wed, 10 Jul 2024 00:00:00 GMThttps://robertstoia.dev/writing/flutter-icon-app/https://robertstoia.dev/writing/flutter-icon-app/Learn how to configure Flutter app icons manually for Android and iOS, from generating image sizes to updating native project files.Sun, 30 Jun 2024 00:00:00 GMT