RBAC Is Not Enough: Thinking About Authorization in Enterprise Systems
Understand where role-based access control falls short in enterprise systems and why authorization must consider organizational context.
Fullstack Software Engineer · 4+ years of experience
I’m Tope Taiwo, a fullstack software engineer building web, mobile, and cloud-native applications with TypeScript, Python, React, React Native, Next.js, NestJS, FastAPI, and PostgreSQL.
I design scalable APIs, distributed systems, event-driven microservices, multi-tenant platforms, and secure authentication systems, translating business needs into reliable products with cross-functional teams.
Notes on backend engineering, architecture, and lessons from building software.
Understand where role-based access control falls short in enterprise systems and why authorization must consider organizational context.
Design production session management for JWT applications, including device tracking, session revocation, and web and mobile clients.
Design authentication beyond login by considering verification, recovery, revocation, multiple devices, and web and mobile clients.
Compare Express and NestJS through architecture, constraints, and team needs to choose a framework that fits the system.
Compare feature-based and layer-based Node.js project structures, and see how organizing code by business capability supports growth.
Learn how dependency inversion and clear boundaries let backend infrastructure evolve without coupling business logic to specific providers.
Lessons from production backend work on structuring applications so their business capabilities remain understandable and changeable.
Explore how feature-oriented modules and clear dependency boundaries help make NestJS backends easier to maintain as they grow.
An introduction to this engineering blog and its focus on backend systems, software architecture, and lessons from building software.