HashMap vs Hashtable in Java
Anchor comparison article for legacy vs modern map usage.
comparisonTopics
Backend study topic clusters
Browse the core content clusters behind Backend Study Lab: 142 published anchors and 2 planned articles or tools.
Java
Java Collections
Practical guides for understanding Java collection classes, equality, hashing, tradeoffs, complexity, and common interview questions.
TreeMap vs HashMap in Java
Compares hash-table lookup with sorted map behavior, range queries, comparator rules, and backend defaults.
comparisonHashSet vs TreeSet in Java
Compares hash-based membership with sorted set behavior, range operations, comparator rules, and null handling.
comparisonArrayList vs LinkedList in Java
High-volume search query with practical performance tradeoffs.
comparisonQueue vs Deque in Java
Compares FIFO queues, double-ended operations, ArrayDeque, LinkedList, stack usage, and concurrent queue choices.
comparisonJava PriorityQueue Explained
Heap-backed queue guide with examples and pitfalls.
tutorialHashMap Load Factor Explained
Supports HashMap cluster and internal linking.
informationalJava equals and hashCode Explained
Explains equality contracts, hashCode rules, immutable keys, records, and HashMap/HashSet correctness.
tutorialHashMap Collision Handling Explained
Explains buckets, collisions, equals checks, tree bins, load factor, bad keys, and lookup performance.
informationalConcurrentHashMap Explained
Bridge Java collections and concurrency content.
tutorialTime Complexity of Java Collections
Reference bridge between Java collection choices and Big-O analysis.
referenceBackend
Spring Backend Basics
Spring Boot backend fundamentals for REST controllers, validation, service boundaries, error handling, and API contracts.
Spring Boot REST Controller Explained
Explains @RestController, request mappings, DTOs, validation, status codes, error handling, and controller tests.
tutorialSpring Boot Request Validation Explained
Planned companion for Bean Validation, field errors, nested DTOs, and API-friendly validation responses.
tutorialSpring Boot Exception Handling Explained
Planned guide for @RestControllerAdvice, consistent error shapes, request IDs, and status code mapping.
tutorialAPI Design
API Design
Clear comparisons, checklists, schemas, authentication patterns, CORS preflight behavior, service credentials, abuse prevention, scopes, and contracts for maintainable backend APIs.
REST vs RPC
Pillar comparison for API style decisions.
comparisonPUT vs PATCH in REST APIs
Clarifies full replacement vs partial update semantics, idempotency, validation, and status code choices.
comparisonOpenAPI Explained for Backend Developers
Explains paths, operations, schemas, examples, auth, versioning, code generation, and contract review.
informationalJSON Schema vs OpenAPI Schema
Compares standalone JSON Schema with OpenAPI Schema in HTTP API contracts, validation, docs, examples, and tooling.
comparisonREST API Design Checklist
Checklist for reviewing REST resources, methods, status codes, errors, pagination, idempotency, auth, versioning, and OpenAPI docs.
referenceREST API Status Codes Explained
Evergreen reference with strong internal linking potential.
referenceHTTP Status Code Lookup
Search common HTTP status codes with API usage and retry guidance.
referenceJSON to TypeScript Types Generator
Generate starter TypeScript types from JSON API response examples locally.
referenceJSON Schema Generator
Generate starter JSON Schema drafts from example API payloads locally.
referenceJSONPath Tester
Query nested API payloads and inspect matched values locally.
referenceJSON Pointer Resolver
Resolve exact JSON node locations for OpenAPI, JSON Schema, JSON Patch, and API debugging.
referenceAPI Key Design Best Practices
Design safer API keys with identifiable prefixes, hashed secrets, scopes, rotation, rate limits, and audit logs.
tutorialAPI Authentication Best Practices
Explains API credential choices, token validation, scopes, rotation, gateways, 401/403 behavior, and safe logs.
tutorialCookie vs Token Authentication
Compares cookies, bearer tokens, sessions, JWTs, CSRF, XSS, storage, CORS, and client tradeoffs.
comparisonOAuth Scopes Explained
Explains scope naming, least privilege, consent, token claims, resource server validation, and common mistakes.
informationalOAuth Client Credentials Flow Explained
Explains service-to-service OAuth, client authentication, scoped tokens, token caching, and credential rotation.
informationalService Accounts Explained
Explains machine identities, scoped credentials, least privilege, rotation, audit logs, and decommissioning.
informationalAPI Abuse Prevention Explained
Explains rate limits, quotas, enumeration, bot patterns, security event logging, gateways, and clear API errors.
informationalIdempotency in APIs Explained
Useful for payment, retry, and distributed system examples.
informationalUUID Generator
Generate UUID v4 values for idempotency keys, request IDs, and backend test data.
referencePagination Strategies for REST APIs
Practical guide covering offset, cursor, and keyset pagination.
tutorialAPI Pagination Metadata Best Practices
Explains pageInfo, cursors, hasNextPage, limits, totals, links, sorting, empty states, and compatibility.
tutorialRate Limiting in APIs Explained
Explains 429 responses, quota windows, token buckets, and backend enforcement choices.
informationalAPI Versioning Explained
Covers URL versions, header versions, backward compatibility, deprecation, and migrations.
informationalAPI Gateway Explained
Explains gateway routing, authentication, rate limiting, observability, and architecture tradeoffs.
informationalCORS Preflight Explained
Explains browser OPTIONS checks, allowed methods, headers, credentials, caching, debugging, and backend mistakes.
informationalWebhooks Explained
Covers webhook delivery, signatures, retries, idempotency, ordering, and receiver design.
tutorialWebhook Signature Verification
Explains HMAC signatures, raw request bodies, timestamps, replay protection, secret rotation, and safe webhook failures.
tutorialREST API Error Handling Best Practices
Practical guide for status codes, stable error codes, field errors, request IDs, and safe messages.
tutorialBackend
Authentication
Backend authentication and authorization concepts explained through practical implementation, cookies, CORS, OAuth, service account, token, API key, and permission tradeoffs.
Authorization vs Authentication
Clarifies identity checks, permission checks, 401 vs 403, and API enforcement boundaries.
comparisonRBAC vs ABAC
Compares role-based and attribute-based authorization models for backend access control.
comparisonLeast Privilege Explained for Backend Developers
Explains narrow permissions for users, services, API keys, database roles, cloud access, and operations.
informationalPassword Hashing Explained
Explains password hashing, salts, peppers, verification, reset tokens, and storage mistakes.
informationalMFA Explained for Web Apps
Explains multi-factor authentication, enrollment, backup codes, recovery, and step-up checks.
informationalSession Fixation Explained
Explains session fixation attacks, session ID rotation, cookie controls, and login trust transitions.
informationalJWT vs Session Authentication
Core comparison for auth architecture.
comparisonCookie vs Token Authentication
Compares cookies, bearer tokens, sessions, JWTs, CSRF, XSS, storage, CORS, and client tradeoffs.
comparisonAccess Token vs Refresh Token
Natural follow-up to JWT vs session.
comparisonRefresh Token Rotation Explained
Explains rotating refresh tokens, reuse detection, token families, revocation, and refresh race conditions.
informationalOAuth 2.0 Explained for Backend Developers
Large concept article with many internal link opportunities.
informationalOAuth 2.0 vs OpenID Connect
Explains delegated authorization, login, ID tokens, access tokens, and OIDC boundaries.
comparisonAPI Key vs OAuth Token
Compares long-lived API keys with scoped OAuth tokens for integrations and delegated API access.
comparisonAPI Key Design Best Practices
Explains API key format, hashing, scopes, rotation, rate limits, audit logs, and safe storage.
tutorialAPI Authentication Best Practices
Explains API credential choices, token validation, OAuth, API keys, rotation, status codes, and safe logging.
tutorialOAuth Scopes Explained
Explains scopes, consent, roles vs scopes, least privilege, tenant checks, and API permission validation.
informationalOAuth Client Credentials Flow Explained
Explains machine-to-machine OAuth, client secrets, service identity, scopes, token caching, and validation.
informationalService Accounts Explained
Explains machine identities, scoped credentials, least privilege, rotation, audit logs, and decommissioning.
informationalJWT Claims Explained
Covers registered claims, custom claims, scopes, roles, tenant context, and validation mistakes.
informationalCSRF vs XSS
Security comparison useful for auth and web backend clusters.
comparisonCORS Explained for Backend Developers
Explains origins, preflight requests, credentials, allowed headers, and CORS security limits.
informationalCORS Preflight Explained
Explains browser OPTIONS checks, allowed methods, headers, credentials, caching, debugging, and backend mistakes.
informationalSameSite Cookies Explained
Explains SameSite cookie modes, CSRF risk, OAuth callbacks, and secure session cookie design.
informationalCookie Security Checklist
Checklist for HttpOnly, Secure, SameSite, CSRF, session rotation, prefixes, expiration, scope, and logging.
referenceSecure HTTP Headers Explained
Explains HSTS, CSP, frame protection, referrer policy, permissions policy, and cookie-related limits.
informationalJWT Decoder
Local-only tool for inspecting JWT header and payload claims without signature verification.
referenceBackend
Backend Security
Security-focused backend guides for authentication, authorization, cookies, CORS, OAuth scopes, service credentials, browser risks, secrets, audit logs, API abuse controls, and safe API behavior.
Authorization vs Authentication
Clarifies identity checks, permission checks, 401 vs 403, and API enforcement boundaries.
comparisonRBAC vs ABAC
Compares RBAC, ABAC, ownership checks, tenant boundaries, role explosion, and policy complexity.
comparisonPassword Hashing Explained
Explains safe password storage with one-way hashes, salts, cost factors, reset tokens, and login flow risks.
informationalMFA Explained for Web Apps
Explains MFA enrollment, TOTP, WebAuthn, backup codes, recovery flows, and step-up authentication.
informationalSession Fixation Explained
Explains session fixation attacks, session ID rotation, cookie controls, and MFA trust transitions.
informationalJWT vs Session Authentication
Compares stateless bearer tokens with server-side sessions, logout, revocation, and browser storage tradeoffs.
comparisonCookie vs Token Authentication
Compares cookies, bearer tokens, sessions, JWTs, CSRF, XSS, storage, CORS, and client tradeoffs.
comparisonAccess Token vs Refresh Token
Compares short-lived access tokens with longer-lived refresh tokens in backend auth flows.
comparisonRefresh Token Rotation Explained
Explains rotating refresh tokens, reuse detection, token families, revocation, and refresh race conditions.
informationalOAuth 2.0 vs OpenID Connect
Explains delegated authorization, login, ID tokens, access tokens, and OIDC boundaries.
comparisonAPI Key vs OAuth Token
Compares API keys and OAuth tokens for service access, user context, scopes, rotation, and expiration.
comparisonAPI Key Design Best Practices
Explains API key format, hashing, scopes, rotation, rate limits, audit logs, and safe storage.
tutorialAPI Authentication Best Practices
Explains protected API credentials, token validation, least privilege, gateways, auth failures, and security logs.
tutorialOAuth Scopes Explained
Explains scope design, least privilege, consent, resource server checks, and common authorization mistakes.
informationalOAuth Client Credentials Flow Explained
Explains service-to-service tokens, client secrets, scopes, token validation, and credential lifecycle risks.
informationalService Accounts Explained
Explains machine identities, scoped credentials, least privilege, rotation, audit logs, and decommissioning.
informationalSecurity Event Logging Explained
Explains auth events, API abuse signals, safe metadata, alerting, retention, and investigation workflows.
informationalAPI Abuse Prevention Explained
Explains rate limits, quotas, enumeration, bot patterns, security event logging, gateways, and clear API errors.
informationalAudit Logs Explained for Backend Systems
Explains actor, action, resource, timestamp, safe metadata, retention, and investigation workflows.
informationalSecret Management Explained for Backend Developers
Explains environment variables, secret stores, rotation, logging risks, CI, and production workflows.
informationalLeast Privilege Explained for Backend Developers
Explains narrow access for users, services, API keys, database roles, cloud permissions, and temporary access.
informationalJWT Claims Explained
Covers registered claims, custom claims, scopes, roles, tenant context, and validation mistakes.
informationalCORS Explained for Backend Developers
Explains origins, preflight requests, credentials, allowed headers, and CORS security limits.
informationalCORS Preflight Explained
Explains browser OPTIONS checks, allowed methods, headers, credentials, caching, debugging, and backend mistakes.
informationalSecure HTTP Headers Explained
Explains HSTS, CSP, frame protection, referrer policy, permissions policy, and cookie-related limits.
informationalSameSite Cookies Explained
Explains SameSite cookie modes, CSRF risk, OAuth callbacks, and secure session cookie design.
informationalCookie Security Checklist
Checklist for HttpOnly, Secure, SameSite, CSRF, session rotation, prefixes, expiration, scope, and logging.
referenceCSRF vs XSS
Compares request forgery and script injection risks for browser-backed backend systems.
comparisonWebhook Signature Verification
Explains HMAC signatures, raw request bodies, timestamps, replay protection, secret rotation, and safe webhook failures.
tutorialREST API Error Handling Best Practices
Practical guide for status codes, stable error codes, field errors, request IDs, and safe messages.
tutorialREST API Status Codes Explained
Useful for 401, 403, 404, 409, 429, and other security-relevant API responses.
referenceRate Limiting in APIs Explained
Explains 429 responses, quota windows, token buckets, and backend enforcement choices.
informationalAPI Gateway Explained
Explains gateway routing, authentication, rate limiting, observability, and architecture tradeoffs.
informationalJWT Decoder
Local-only JWT inspection tool for test tokens and auth debugging.
referenceHTTP Status Code Lookup
Quick reference for 401, 403, 429, 5xx, and other security-relevant API responses.
referenceAlgorithms
Algorithms and Complexity
Algorithm fundamentals for backend developers, with emphasis on practical complexity, array patterns, and interview readiness.
Big-O Notation Explained
Pillar article for algorithm complexity.
informationalSliding Window Algorithm Explained
Explains fixed and variable windows, Java examples, complexity, and contiguous range problems.
tutorialTwo Pointers Algorithm Explained
Explains start-end pointers, read-write pointers, sorted scans, merges, linked lists, and Java examples.
tutorialPrefix Sum Algorithm Explained
Explains range-sum preprocessing, subarray sums, difference arrays, Java examples, and complexity.
tutorialTime Complexity of Java Collections
Connects Java collections with Big-O content.
referenceBinary Search Explained
Classic algorithm tutorial with Java examples.
tutorialTop K Elements Explained
Connects PriorityQueue and algorithm interview prep.
tutorialSystem Design
System Design Basics
Foundational backend architecture topics for databases, query performance, operations, concurrency, scaling, reliability, and production tradeoffs.
Database Indexes Explained
Explains index tradeoffs, composite indexes, query planning, and backend performance reviews.
informationalN+1 Query Problem Explained
Explains hidden ORM query loops, eager loading, joins, batching, query counts, and list endpoint performance.
tutorialDatabase Connection Pooling Explained
Explains pool size, connection timeouts, leak detection, transaction pressure, worker pools, and monitoring.
informationalDatabase Migration Rollback Explained
Explains rollback vs roll forward, expand-contract migrations, backups, deploy order, and recovery plans.
tutorialOptimistic Locking Explained
Covers version columns, lost updates, compare-and-swap updates, and 409 conflict responses.
informationalCaching Strategies Explained
Explains cache-aside, TTLs, invalidation, cache stampedes, and backend freshness tradeoffs.
tutorialMessage Queues Explained
Covers producers, consumers, retries, dead-letter queues, ordering, and idempotent processing.
informationalDatabase Transactions Explained
Explains commits, rollbacks, ACID, isolation, and transaction boundaries for backend workflows.
informationalCircuit Breaker Pattern Explained
Explains closed, open, and half-open breaker states for protecting backend dependencies.
informationalDatabase Sharding Explained
Covers shard keys, routing, hot shards, cross-shard queries, and sharding tradeoffs.
informationalEventual Consistency Explained
Explains stale reads, convergence, read-your-writes, and async distributed system behavior.
informationalLoad Balancing Explained
Covers traffic distribution, algorithms, health checks, sticky sessions, and deployment tradeoffs.
informationalDistributed Locks Explained
Explains lease-based locks, fencing tokens, failure modes, and safer alternatives.
informationalRetry Patterns Explained
Covers timeouts, exponential backoff, jitter, retry budgets, and idempotent retries.
tutorialBackground Jobs Explained
Explains queues, workers, scheduled jobs, idempotency, status tracking, and monitoring.
tutorialDeveloper Tools
Developer Tools
Utility pages that pair SEO-friendly explanations with fast browser-based developer tools.
HTTP Status Code Lookup
Search common HTTP status codes with API usage and retry guidance.
referenceText Diff Checker
Compare text snippets line by line for API responses, configs, SQL, logs, and documentation.
referenceMarkdown Table Generator
Convert CSV, TSV, and pasted rows into Markdown tables for docs and READMEs.
referenceCSV to JSON Converter
Convert CSV, TSV, and delimited text into JSON arrays or objects locally.
referenceJSON to TypeScript Types Generator
Generate TypeScript interfaces or type aliases from JSON payload examples.
referenceJSON Schema Generator
Generate starter JSON Schema drafts from example JSON payloads.
referenceJSONPath Tester
Test common JSONPath expressions against API responses, fixtures, and logs.
referenceJSON Pointer Resolver
Resolve RFC 6901 JSON Pointers against JSON locally with value and path metadata output.
referenceJSON Formatter
Format and minify JSON locally in the browser.
referenceBase64 Encoder / Decoder
Encode and decode Base64 text locally.
referenceURL Encoder / Decoder
Encode URL components and decode percent-encoded strings.
referenceRegex Tester
Test JavaScript regex patterns with matches, groups, and replacement previews.
referenceBig-O Cheat Sheet
Look up common data structure and algorithm complexities with Java-oriented notes.
referenceCron Parser
Explain five-field cron expressions and preview upcoming run times locally.
referenceSQL Formatter
Format and minify SQL queries locally before debugging or code review.
referenceJWT Decoder
Decode JWT header and payload claims locally for authentication debugging.
referenceUnix Timestamp Converter
Convert Unix seconds, milliseconds, UTC, and local browser dates for backend debugging.
referenceUUID Generator
Generate UUID v4 values locally for request IDs, idempotency keys, and test data.
reference