Web Development

What is Next.js Middleware❔

Why React Hydration Exists When a server sends HTML to your browser, the page already looks complete before any JavaScript finishes loading. But looks can be misleading. Buttons don't respond. Forms don't submit. Dropdowns don't open.

Hydration is the process where React attaches JavaScript to that existing HTML, making it interactive instead of rebuilding the page from scratch.

This is also why JavaScript bundle size matters so much. The browser can't hydrate components until it has downloaded, parsed, and executed their JavaScript. That's why modern frameworks push more work to the server. Not because JavaScript is bad, but because sending less of it usually means users can interact with the page sooner.

❌ Stop Returning 200 One habit that makes debugging APIs much harder is returning HTTP 200 OK for every request. An HTTP status code tells the client what happened before it even reads the response body. Examples: 200 → Success 201 → Resource created 400 → Client sent invalid data 401 → Authentication required 403 → Authenticated, but not allowed 404 → Resource doesn't exist 500 → Server failed unexpectedly If every response is 200, frontend developers have to inspect every response body just to know whether something failed. Let HTTP do its job. That's what it was designed for.

📖 Read The Source When you're stuck with a library, stop searching YouTube after 20 minutes. Open its documentation. If that doesn't explain it, read the source code. You don't need to understand every file. Find the function you're calling and follow the execution. You'll often discover hidden options, edge cases, or implementation details that never made it into the docs. Reading source code is one of the fastest ways to become a stronger developer.

The Truth About CORS

CORS (Cross-Origin Resource Sharing) is a browser security mechanism that decides whether one website is allowed to request resources from another.

Suppose your frontend runs on:

http://localhost:5173

Your API runs on:

http://localhost:3000

Same computer. Different ports. That makes them different origins. Your browser blocks the request because the API never explicitly allowed requests from that origin. "But it works in Postman..." Of course it does. Postman isn't a browser. It doesn't enforce browser security rules.

If Postman works but your browser doesn't, the problem usually isn't your API logic. It's your server's CORS configuration.

🚨Someone open-sourced the Kage landing page and the Three.js skills behind it. Every section scrolls through a 3D world and the whole thing is under 1MB of Three.js and code, 3MB with high quality images. For a fully 3D scroll experience that's surprisingly lean. Three skills included: build-threejs-scroll-worlds, falling-leaves and pointer-trail-emitter. All open source on GitHub. 🔗Check it out: https://github.com/MengTo/kage

🎨 Refero Styles Refero Styles is a curated gallery of production UI designs organized by visual style rather than by company. It makes it easy to explore layouts, components, and design patterns used across real applications, all from a single place. This might came in handy when designing web or mobile interfaces. 🔗 https://styles.refero.design/

🧠 20 GitHub Repos That Expose What Tutorials Never Taught You You can build a to-do app in five frameworks and still not know how a database index works. These repos close that gap. 1. computer-science A full self-taught CS degree curriculum, for anyone who skipped college or forgot what they learned. 2. the-book-of-secret-knowledge A huge stash of tools, tricks, and one-liners that experienced devs pick up over years, all in one place. 3. system-design-primer Breaks down how the apps you use every day handle millions of users behind the scenes. 4. build-your-own-x Walks you through building your own Git, Docker, or database, so the tools you use daily stop feeling like black boxes. 5. linux-insides A gentle, detailed walkthrough of how the Linux kernel actually works under the hood. 6. professional-programming Covers everything tutorials skip: engineering practices, architecture, and how real teams ship code. 7. project-based-learning A list of real projects to build, for when tutorial hell starts feeling too comfortable. 8. you-dont-know-js JavaScript fundamentals most developers using JS every day have never actually learned. 9. CS-Notes Clear, structured notes on algorithms, operating systems, networking, and databases in one repo. 10. the-algorithms Classic algorithms and data structures implemented in almost every language, good for understanding rather than memorizing. 11. free-programming-books Thousands of free books covering the fundamentals no bootcamp has time for. 12. developer-roadmap Visual maps of what "knowing" a certain stack really involves, useful when you're not sure what you're missing. 13. system-design-101 Visual explanations of system design concepts, built for people who learn by seeing. 14. coding-interview-university A study plan built around filling CS gaps, which happens to also prepare you for interviews. 15. awesome-selfhosted A list of services you can run yourself, good for anyone who's only ever read about infrastructure. 16. realworld The same production app built in dozens of frameworks, so you can compare how they actually differ. 17. public-apis Free APIs to build against real, messy data instead of another seeded dummy database. 18. first-contributions A guided first pull request, for anyone too intimidated to touch someone else's codebase. 19. awesome The master list of curated resources. When you don't know what you don't know, start here. 20. 30-seconds-of-code Short, sharp snippets that teach patterns instead of just giving you copy-paste answers. ➖➖➖➖➖➖➖➖➖➖➖➖➖➖ 👉 Join @bigdataspecialist for more 👈

Worm Compromises Over 1,300 npm Packages Including Popular Caching Tools A self-spreading worm called ChainDrop has compromised more than 1,300 npm packages, including popular ones like Keyv, Cacheable, and flat-cache. The packages together have around 2 billion monthly downloads. The attack started after a maintainer’s GitHub account was compromised. The malware steals credentials and spreads by publishing new malicious versions. Developers are urged to check their dependencies and rotate any exposed credentials.

📘 The Little ASP.NET Core Book ✍️ Authors: Nate Barbettini 🔗 Read Online #ASP.NET ──────────────────── 👉 @free_programming_books_bds 👈