Web Development

What Actually Is HTTPS?

HTTPS is HTTP running over TLS (Transport Layer Security).

TLS is responsible for encrypting the communication.

HTTP still handles things like:
🎯 Methods (GET, POST)
🎯 Headers
🎯 Cookies
🎯 Status codes

Before any HTTP data is exchanged, the browser and server perform a TLS handshake.

During this process they:
- Verify the server's identity using its certificate.
- Agree on an encryption algorithm.
- Generate shared encryption keys.

Only after that does the browser send the first HTTP request.

Without TLS, every request and response could be read or modified while travelling across the network.

👉 HTTPS isn't a different protocol. It's HTTP inside an encrypted tunnel.

📂 API Design Roadmap
┃
┣ 📂 Foundations
┃ ┣ 📂 What is an API?
┃ ┣ 📂 HTTP & HTTPS Fundamentals
┃ ┣ 📂 Request & Response Lifecycle
┃ ┣ 📂 JSON & Data Formats
┃ ┗ 📂 API Design Principles
┃
┣ 📂 REST API Design
┃ ┣ 📂 REST Architecture
┃ ┣ 📂 Resources & Endpoints
┃ ┣ 📂 HTTP Methods (GET, POST, PUT, DELETE, PATCH)
┃ ┣ 📂 Status Codes
┃ ┗ 📂 REST Best Practices
┃
┣ 📂 API Documentation
┃ ┣ 📂 OpenAPI Specification
┃ ┣ 📂 Swagger UI
┃ ┣ 📂 API Reference Documentation
┃ ┣ 📂 Examples & SDKs
┃ ┗ 📂 Versioned Documentation
┃
┣ 📂 Authentication & Authorization
┃ ┣ 📂 API Keys
┃ ┣ 📂 JWT Authentication
┃ ┣ 📂 OAuth 2.0 & OpenID Connect
┃ ┣ 📂 Role-Based Access Control (RBAC)
┃ ┗ 📂 Token Management
┃
┣ 📂 API Security
┃ ┣ 📂 HTTPS & TLS
┃ ┣ 📂 CORS Configuration
┃ ┣ 📂 CSRF & XSS Protection
┃ ┣ 📂 Rate Limiting & Throttling
┃ ┗ 📂 Input Validation & Sanitization
┃
┣ 📂 Advanced API Architectures
┃ ┣ 📂 GraphQL
┃ ┣ 📂 gRPC
┃ ┣ 📂 WebSockets
┃ ┣ 📂 Server-Sent Events (SSE)
┃ ┗ 📂 Event-Driven APIs
┃
┣ 📂 API Performance
┃ ┣ 📂 Pagination
┃ ┣ 📂 Filtering & Sorting
┃ ┣ 📂 Caching Strategies
┃ ┣ 📂 Compression
┃ ┗ 📂 Performance Optimization
┃
┣ 📂 API Reliability
┃ ┣ 📂 Error Handling
┃ ┣ 📂 Retry Strategies
┃ ┣ 📂 Idempotency
┃ ┣ 📂 Circuit Breaker Pattern
┃ ┗ 📂 Health Checks
┃
┣ 📂 API Testing
┃ ┣ 📂 Unit Testing
┃ ┣ 📂 Integration Testing
┃ ┣ 📂 Postman & Insomnia
┃ ┣ 📂 Load Testing
┃ ┗ 📂 Contract Testing
┃
┣ 📂 API Deployment
┃ ┣ 📂 API Gateways
┃ ┣ 📂 Reverse Proxies
┃ ┣ 📂 Docker & Containers
┃ ┣ 📂 CI/CD Pipelines
┃ ┗ 📂 Cloud Deployment
┃
┣ 📂 Monitoring & Observability
┃ ┣ 📂 Logging
┃ ┣ 📂 Metrics Collection
┃ ┣ 📂 Distributed Tracing
┃ ┣ 📂 Prometheus & Grafana
┃ ┗ 📂 API Analytics
┃
┣ 📂 AI-Powered APIs
┃ ┣ 📂 OpenAI API Integration
┃ ┣ 📂 Function Calling
┃ ┣ 📂 Streaming Responses
┃ ┣ 📂 AI Agent APIs
┃ ┗ 📂 Cost & Token Optimization
┃
┣ 📂 Real-World Projects
┃ ┣ 📂 Authentication API
┃ ┣ 📂 E-commerce REST API
┃ ┣ 📂 Payment Gateway API
┃ ┣ 📂 AI Chat API
┃ ┗ 📂 Microservices API Platform
┃
┣ 📂 Practice & Growth
┃ ┣ 📂 Build Public APIs
┃ ┣ 📂 Contribute to API Projects
┃ ┣ 📂 Write API Documentation
┃ ┣ 📂 API Design Reviews
┃ ┗ 📂 Interview Preparation
┃
┗ 📂 Career & Monetization
┣ 📂 Backend Engineer Roles
┣ 📂 API Platform Engineer
┣ 📂 SaaS Development
┣ 📂 API Consulting & Freelancing
┗ 📂 Continuous Learning

👉 Follow this consistently for 2–4 months and you'll be able to design, build, secure, and scale production-ready APIs with confidence.

The Microtask Queue

Promises don't execute immediately after they resolve. They wait their turn.

The Microtask Queue is a queue that stores callbacks from resolved Promises before they're executed.

Consider:

console.log("A");

Promise.resolve().then(() => console.log("B"));

console.log("C");

The output is:

A
C
B

Even though the Promise resolves immediately, its callback is placed into the Microtask Queue.

JavaScript finishes the current execution first. Only then does it process queued microtasks.

This is the reason why Promise callbacks always run after synchronous code, even when no network request is involved.

🚀 40 Full Stack Project Ideas

Want to build an impressive portfolio? Here are 40 Full Stack project ideas ranging from beginner to advanced.

🟢 Beginner
1. Personal Portfolio Website
2. To-Do List Application
3. Notes Taking App
4. Expense Tracker
5. Weather Dashboard
6. Blog Website
7. URL Shortener
8. Quiz Platform
9. Contact Management System
10. Movie Search App

🟡 Intermediate
11. E-Commerce Store
12. Job Portal
13. Food Ordering System
14. Hotel Booking System
15. Library Management System
16. Online Voting System
17. Chat Application
18. Social Media Dashboard
19. Event Management System
20. Learning Management System (LMS)
21. Resume Builder
22. Inventory Management System
23. Employee Management Portal
24. QR Code Generator & Scanner
25. Habit Tracker
26. Fitness Tracking App
27. File Sharing Platform
28. URL Analytics Dashboard
29. AI Image Generator
30. AI PDF Summarizer

🔴 Advanced
31. Video Conferencing Platform
32. Project Management Tool (Jira Clone)
33. Real-Time Collaboration Editor (Google Docs Clone)
34. Ride Booking Platform
35. Hospital Management System
36. Banking Application
37. Crowdfunding Platform
38. SaaS CRM Platform
39. Multi-Vendor E-Commerce Marketplace
40. AI-Powered Interview Preparation Platform

💡 Which Full Stack project are you planning to build next? Let us know in the comments!

🔅 Server actions in NextJS

Server actions refer to tasks and operations that are executed on the server side.

Next.js, being a hybrid framework, allows you to perform both server-side and client-side rendering, giving you the flexibility to handle different types of data fetching and processing.

If you design or vibe code, save this list.

- Kokonut UI : Animated React components
- Motion Sites : Website and animation inspiration
- Motion .dev : Web animation
- Anime .js : JavaScript animation
- Particles Casberry : interactive particles and WebGL effects

History API in JavaScript

Modern websites don't reload every page anymore.

So how does the browser change pages without asking the server for a new HTML document?

The answer is the History API.

The History API lets JavaScript change the current URL without triggering a full page refresh.

Frameworks like React Router and Next.js use:

history.pushState(...)

instead of:

window.location = "/dashboard";

The browser updates the address bar. The existing JavaScript application stays alive. Only the required UI changes.

This is why navigation inside a React application feels instant. The browser isn't downloading another website.

It's displaying a different view inside the one that's already running.

Why do we type those two slashes in https://?

It turns out the double slash comes from an old 1980s computer system called Apollo Domain OS.

Back then, if you typed a single slash (/), your computer looked for files inside its own hard drive. The engineers at Apollo needed a way to tell the computer,

Hey, don't look inside yourself, look out at the network.

So, they decided two slashes (//) would mean "network."

When Tim Berners-Lee was building the World Wide Web, he just borrowed that exact rule.
➖ The colon (https:) meant this is the protocol, and
➖ The double slash (//) meant the web address is coming next.

The funny part is he later admitted it was a total mistake. The computer didn't actually need the slashes to understand the link. He joked that if he had just left them out, the world would have saved millions of hours of typing.

This comment answered it right. 👏

Web Devs

Do you know why URLs have two slashes (//) after http:?

Not 1. Not 3. Why 2? 🤔

What Actually Happens During npm install

npm install does far more than download packages.
It first reads your package.json.

Then it looks at your package-lock.json, which records the exact dependency versions your project expects.
Next it builds a dependency tree.

If Package A needs React 18.2.0 and Package B also needs React 18.2.0, npm can reuse that version.

If another package requires React 17, npm may install both versions because their requirements don't match.

Only after resolving that entire tree does npm download packages and place them into node_modules.

That's why deleting package-lock.json can unexpectedly change working code.

The lock file isn't just a cache. It's a snapshot of the dependency tree your project was built and tested with.