The Complete NestJS & Prisma Backend Masterclass Part 2

Implement a global exception filter in NestJS to standardize json error responses by extracting http status and message from exceptions, with an internal server error, and register it in main.

Learn how to implement logging for a NestJS API using Winston, capturing every request and error to diagnose production issues, with options between console logs and external libraries.

Set up winston logging in NestJS by installing winston and Nest. Create a logger module and configure console and file transports with timestamped json logs and error log.

Register the custom Winston logger by overwriting the NestJS default logger, add a logging interceptor, and log request, response, and errors with a unique request id.

Install the uuid package and implement a middleware to generate and attach a request id for each incoming request, preventing undefined request ids in debug mode.

Explore defense layers for a NestJS and Prisma backend, implementing helmet, rate limiting, and body size limits, plus region-based whitelists, to protect APIs from brute-force and payload attacks.

Install helmet and throttling, register helmet in main.ts by importing helmet, and disable the content security policy for api-only apps.

Apply helmet headers to secure the api by adding x-frame-options, x-content-type-options, and referrer-policy, then verify locally at localhost:3000 with a curl test.

Implement rate limiting in the backend by restricting requests per time window. Configure the throttle module globally with ttl 900 seconds (15 minutes) and a limit of 100 requests.

Configure global throttling in NestJS by setting TTL and per-minute limits with the global throttle module and application-level guard, and apply endpoint-specific limits on login in the auth controller.

Test rate limiting by sending multiple login requests, observe throttle exceptions after five requests per minute, and understand the 'too many requests' and 'please wait' responses.

Explore Swagger documentation for a powerful api with many endpoints as a growing project expands beyond 20 endpoints, and learn how Swagger helps document them.

Understand how swagger and the open api spec expose routes, request bodies, parameters, and responses with interactive documentation, and learn to integrate swagger into NestJS and Prisma.

Install swagger and set up swagger docs in a NestJS app using the document builder, configuring title, description, version, and JWT auth, with the UI at api/docs.

Learn to document a create task endpoint with dto properties, API decorators, Swagger tags, and protected routes using jwt auth.

Open the invitation, accept it, and validate the invite flow to confirm the local environment works with Ethereal.

Refactor NestJS backend mailer by replacing node mailer with the recent email service, configure production and development API keys, and test sending emails.

integrate resend into the NestJS and Prisma backend masterclass, wiring the resend api key via config service, creating a resend client, and sending invite emails from the email service.

Execute the deployment plan by hosting the backend on railway, with or without docker, and deploy the database first on neon (a Postgres cloud option) for a Node.js application.

Create neon and vercel accounts, set up neon postgres integration on the free plan, copy the connection string to env, then run prisma migrate dev and prisma generate.

Set up a free tier railway account, install the railway CLI, and deploy a new project via CLI, with railway handling docker; tidy env files and refactor main.ts before deployment.

Create a health route by generating a health controller module, defining a get route that returns status okay, and confirming a dedicated health module.

Update the package.json to add production scripts, including pre-start and port handling, and run prisma migrate deploy plus npx prisma generate, with node env set to production.