Multi-tenancy in NestJS without losing your mind
Three ways to isolate tenant data in a NestJS API, why I stopped passing tenantId around by hand, and the request-scoped approach I settled on.
Notes from the build.
Things I run into while building full-stack products — architecture decisions, hard-won lessons, and the occasional opinion about TypeScript.
Writing.
-
-
RBAC that survives contact with product
Roles are easy to add and almost impossible to remove. A look at permission-first access control, and why the role list should stay boring.
-
Key-based queues beat cron jobs
How replacing a pile of scheduled jobs with per-key queues fixed our ordering bugs, flattened a nasty traffic spike, and made failures debuggable.