Frontend Engineering & UX
Frontend engineering beyond visuals: UI state, React rendering, responsive design, CSS, accessibility, usability, and production UX.
40%
Best tweets about Web Development
Discover the best tweets about web development, including frontend, backend, performance, accessibility, browsers, architecture, tooling, and deployment.
Technical web development practices, browser behavior, performance, accessibility, architecture, frameworks, tooling, and production lessons.
Original Xholic analysis
The 50-post set is led by Frontend Engineering & UX (40% of posts), with AI-Assisted Web Development, Backend Engineering & Architecture, and Web Stacks & Tooling each at 30%. Posts frequently promote browser and backend fundamentals, production tooling, and security distinctions. AI-related posts include both capability-ranking claims and skepticism about agents’ handling of complex frontend work. Lists are the most common format (42%) and have the highest supplied format median all-time score (35.208).
40% of posts
All-time engagement
42% of posts
Published in 90 days
Conversation map
Frontend engineering beyond visuals: UI state, React rendering, responsive design, CSS, accessibility, usability, and production UX.
40%
AI-assisted coding, vibe coding, model capability comparisons, and the enduring need for engineering judgment and maintainable systems.
30%
Backend foundations including HTTP, API design, databases, async processing, caching, real-time systems, and system architecture.
30%
Frameworks, managed platforms, component libraries, SaaS integrations, developer tooling, and pragmatic stack selection for shipping products.
30%
Learning paths, foundational skills, project ideas, and progression guides for frontend, backend, and full-stack developers.
22%
Production delivery practices covering CI/CD, Docker, cloud deployment, environment consistency, monitoring, logging, error tracking, and debugging.
18%
Browser runtime, rendering, hydration, caching, network behavior, and Core Web Vitals for fast, resilient frontends.
16%
Application and web security practices: authentication, authorization, OAuth, sessions, secure storage, CORS, CSRF, XSS, and secrets.
16%
Tone and stance
Performance benchmark
Posts with media make up 24% of this collection. Their median all-time score is 23.5, compared with 11.9 for text-only posts.
Format mix
Consensus and debate
Shared view
Several frontend posts present browser runtime, rendering, caching, hydration, and Web Vitals as important knowledge for UI engineering and production UX.
Shared view
Backend guidance repeatedly covers HTTP, databases, authentication and authorization, caching, queues, observability, and failure-handling patterns. One roadmap explicitly recommends learning these foundations before moving beyond basic APIs into GraphQL or gRPC.
Shared view
Two highly visible workflow checklists recommend established services and tools for functions such as authentication, payments, uploads, monitoring, analytics, deployment, and secret management, rather than implementing every subsystem in-house.
Shared view
Security posts distinguish client-side validation from server-side controls, TLS from application security, and OAuth scopes from roles and permissions.
Open debate
Posts making model-ranking or benchmark claims about web-development capability sit alongside a post arguing that coding agents remain poor at complex frontend tasks, including interactions, performance, responsive design, ARIA, and virtualized lists. The supplied tweets do not independently verify the ranking claims.
Open debate
Two workflow posts recommend managed platforms and component libraries to ship quickly, while the Vanilla Web post presents plain HTML, CSS, and JavaScript as a lower-tooling option with more control.
What performs
All five supplied score outliers are list-format posts. They cover vibe-coding workflow, modern web concepts, backend terms, backend learning priorities, and shipping guidance.
Lists account for 42% of the 50-post set and have a supplied median all-time score of 35.208. Opinion posts account for 30% and have a supplied median score of 4. Among the listed formats, lists have the highest supplied median score.
Browser & Web Performance has a supplied median all-time score of 37.44. Web Security & Identity has 47.42, the highest median among the listed themes.
Statistical standouts
Creator landscape
The five most represented creators account for 20% of the selected posts.
1. Abhishek Singh
@0xlelouch_
2 posts
2. Ajay Yadav
@ATechAjay
2 posts
3. avrl ☘
@avrldotdev
2 posts
4. Edison
@CodeEdison
2 posts
5. Ritesh Roushan
@devXritesh
2 posts
6. K.O.O
@Dominus_Kelvin
2 posts
Hartdrawss’s two checklist posts advocate a workflow built around managed services, preview deployments, observability, performance checks, documentation, and modular project structure. The creator’s supplied median all-time score is 343.89.
Jahir Sheikh’s two lists span frontend/browser concepts and backend infrastructure concepts, presenting broad web-system knowledge as a useful developer skill set. The supplied creator median all-time score is 235.2.
devXritesh combines a staged backend-learning roadmap with a concise production message about retries, timeouts, circuit breakers, idempotency, and observability. The supplied creator median all-time score is 96.65.
Themes, sentiment, stance, and post format are classified per tweet. All counts, shares, medians, creator concentration, freshness, and performance comparisons are then calculated directly from the published snapshot.
Xholic's all-time score compares engagement while accounting for reach, post age, and creator consistency. It is used for relative comparisons within this collection.
This report analyzes the exact 50-post snapshot shown below. AI identifies editorial categories and drafts explanations; all statistics are calculated from the snapshot, and every narrative claim is checked against cited posts before publication.
Best Web Development tweets
Ranked 01–50
@Hartdrawss ·
Vibe Coding lessons I learnt the HARD WAY ( Extended Edition ) Bookmark this to 10X your workflow DO's (What Actually Saves You Time) > Use ready-made auth (Clerk / Supabase Auth) > Use Tailwind + shadcn/ui for UI > Use Zustand / Server Components for state > Use tRPC / Server Actions for APIs > Deploy with Vercel one-click > Use Prisma + managed Postgres > Validate with Zod + React Hook Form > Use Stripe for payments > Add Sentry / error tracking early > Set up analytics (PostHog / Plausible) > Store secrets in env files > Use UploadThing / Cloudinary for files > Set up preview deployments > Use component libraries (Radix / shadcn) > Write a README from Day 1 > Keep folders clean and modular > Add onboarding + empty states > Use Lighthouse / performance tools > Use a monorepo or clear app structure from the start > Document your env vars in .env.example DON'Ts (What Burns Your Time & Energy) > Don't build auth from scratch > Don't write raw CSS for everything > Don't over-engineer state management > Don't build custom APIs too early > Don't deploy manually > Don't write raw SQL everywhere > Don't build your own payment system > Don't roll your own search engine > Don't skip logging & monitoring > Don't hardcode API keys > Don't DIY file uploads > Don't push straight to main > Don't build realtime systems alone > Don't ignore performance > Don't assume users "will figure it out" > Don't postpone refactoring forever > Don't rely on memory for decisions > Don't chase "perfect" before shipping > Don't skip error boundaries and fallbacks > Don't forget a health check endpoint
@jahirsheikh8 ·
As a modern web developer in 2026, you should clearly understand: - CSR vs SSR vs SSG - Hydration - Reconciliation - Virtual DOM - State Management - Memoization - Debouncing vs Throttling - Browser Rendering Pipeline - Critical Rendering Path - Lazy Loading - Code Splitting - Tree Shaking - CORS - Same-Origin Policy - Service Workers - WebSockets - SSE (Server-Sent Events) - HTTP Caching - ETags - Preload / Prefetch - Lighthouse Metrics - TTI / FCP / LCP - Layout Shift (CLS) - Accessibility Basics Otherwise, you're just shipping JS, not engineering UX.
@jahirsheikh8 ·
You’re not a real backend developer until you understand these terms: • 🌐 REST → Standard API architecture • ⚡ gRPC → High-performance binary RPC communication • 🔐 JWT → Stateless auth tokens • 🧠 Redis → In-memory cache / datastore • 📨 Kafka → Distributed event streaming • 🔄 Idempotency → Safe retry without duplicate effects • 🧵 Queue → Background job processing • 📦 CDN → Fast global asset delivery • 🛡 Rate Limiting → Prevent abuse / overload • 🏗 Load Balancer → Distribute traffic across servers • 🔍 Index → Speeds up database queries • 🧬 Sharding → Split DB across machines • ♻️ Replication → Copy DB for redundancy • 🚨 Circuit Breaker → Prevent cascading failures • 🪝 Webhooks → Event-driven HTTP callbacks 📑 Save this before your next interview.
@devXritesh ·
Many developers jump straight into frameworks like Spring Boot, Express.js, or Django But frameworks don't make you a strong backend engineer Here's what actually matters: • Learn how HTTP works (methods, headers, cookies, status codes). • Understand databases indexing, transactions, joins, and query optimization. • Master authentication and authorization (JWT, OAuth, sessions). • Learn caching with Redis and when to use it. • Build REST APIs before exploring GraphQL or gRPC. • Understand asynchronous processing with queues like Kafka, RabbitMQ, or SQS. • Learn how files are uploaded, stored, and served efficiently. • Study logging, monitoring, and observability using tools like Prometheus and Grafana. • Learn containerization with Docker and basic Kubernetes concepts. • Understand system design fundamentals: load balancers, CDNs, replication, sharding, and rate limiting. • Learn cloud basics (AWS, Azure, or GCP) and deploy real projects. • Most importantly, build projects that solve real problems. Don't try to learn everything at once. Master one concept, build something with it, then move to the next. That's how good backend engineers are made.
@Hartdrawss ·
Things every Vibe Coder MUST Learn (Extended Edition) 1/ Don’t reinvent databases > Use Prisma + Postgres (Neon / Supabase / PlanetScale) > Manual SQL + migrations = silent suffering 2/ Don’t write forms by hand > Use React Hook Form + Zod > Validation bugs will eat your soul 3/ Don’t build payment flows yourself > Use Stripe or Polar for web. Superwall or revenuecat for mobile > Never touch PCI compliance willingly 4/ Don’t build search from scratch > Use Algolia / Meilisearch / Typesense > Text search is way harder than it looks 5/ Don’t overbuild backend infra early > Use Serverless / BaaS first > Scale later, survive now 6/ Don’t ignore error tracking > Use Sentry / LogRocket > Console.log is not observability 7/ Don’t skip analytics > Use PostHog / Plausible > You’re flying blind otherwise 8/ Don’t design UI without components > Use shadcn/ui / Radix / Mantine > Consistency > creativity at MVP stage 9/ Don’t hardcode configs > Use env + dotenv + secrets manager > Leaks = instant regret 10/ Don’t DIY file uploads > Use UploadThing / Cloudinary / S3 > Multipart hell is real 11/ Don’t “just push to main” > Use GitHub Actions + Preview Deploys. Future-you will thank you 12/ Don’t skip performance tools > Use Lighthouse + Vercel Analytics. Slow apps don’t convert 13/ Don’t assume users understand anything > Add onboarding + empty states UX > Features 14/ Don’t wait to modularize > Use clean folders early. Refactors cost 10x later 15/ Don’t trust “I’ll remember this” > Document in README or markdowns. Your memory will betray you Bookmark to ship Better !
@vivoplt ·
Backend Development Project Ideas • Expense Tracker API • Blogging Platform API • Task Tracker • TMDB CLI Tool • Caching Proxy • Markdown Note Taking App • Image Processing Service • Broadcast Server • Workout Tracker • Real Time Leaderboard • database Backup Utility • Movie Reservation System • Scalable E Commerce Platform
@DesignArena ·
BREAKING: @AnthropicAI models overwhelmingly dominate design-centric coding tasks, as of March 2026. Opus 4.6 places first across Web Development (HTML & React & Full-Stack), in both one-shot and multi-turn categories. Opus 4.6 and Sonnet 4.6 place first in mobile development (React Native and Android). Opus 4.6 places first on 3D Design, Game Dev, and Data Viz. Gemini 3.1 by @GoogleDeepMind takes first place on SVG design. This title was previously held by @QuiverAI (see our change log). This map looked very different just 2 months ago. Huge congrats to the @AnthropicAI team on defining SOTA.
@EOEboh ·
As a frontend engineer, you should be able to explain these backend concepts: - What an API actually is under the hood - The difference between 401 and 403 - Why you never trust client-side validation alone - What CORS is and why it exists - The difference between cookies and localStorage - What a webhook is vs a regular API call - Why you shouldn't store JWTs in localStorage - What rate limiting means for your API calls Frontend devs who understand these are the ones who become fullstack
@askwhykartik ·
6 months ago a client told me he was going to vibe code his own web app. Honestly I was happy for him. Told him to go for it. Yesterday he messaged me. "bro web app is live. But I need a mobile app now." Sent him a $5k proposal. He paid same day. No negotiation. No "can you do it cheaper." Nothing. This is the thing nobody talks about - AI is commoditizing web development fast. Anyone with Claude and some patience can ship a decent web app now. Mobile is a different game. Clients still can't figure it out themselves. That's exactly where the money is right now. 📱
@avrldotdev ·
10 browser concepts every UI engineer must know: 0. Event loop (microtasks vs macrotasks) 1. Rendering pipeline (paint, layout, composite) 2. Reflow vs Repaint 3. Critical rendering path 4. Caching (HTTP cache, service workers) 5. Debounce vs throttle 6. Intersection Observer (lazy loading) 7. Web storage (localStorage & sessionStorage) 8. Same-origin policy (CORS) 9. Preloading/prefetching resources
@CodeEdison ·
Backend development is “simple” as long as you understand these fundamentals: HTTP basics • Methods • Status codes • Request and response headers Security & identity • Authentication vs authorization • JWTs, sessions, and cookies • OAuth 2.0 • Password hashing (bcrypt / Argon2) • Salting and peppering • 2FA and SSO • RBAC and ABAC API fundamentals • API design principles • RESTful APIs • GraphQL • WebSockets • API versioning • Rate limiting and throttling • Pagination, filtering, and sorting • File uploads and streaming Server concepts • Middleware • Error handling • Logging and monitoring • APM (performance monitoring) • Server-side rendering Databases • Database design • SQL and NoSQL • Indexing and query optimization • ACID properties • CAP theorem • Normalization vs denormalization • ORMs • Connection pooling • Transactions, migrations, and seeding Caching & performance • Caching strategies • Redis and Memcached • CDN integration Scalability & architecture • Load balancing • Horizontal vs vertical scaling • Monoliths, microservices, and SOA • Message queues and Pub/Sub • Event-driven systems • CQRS and Saga patterns • API gateways and service mesh Infrastructure & DevOps • Docker containers • Kubernetes orchestration • CI/CD pipelines • Environment variables • Configuration and secrets management Security hardening • CORS • CSRF protection • XSS prevention • SQL injection prevention • Input validation and output sanitization Background processing • Background jobs • Cron jobs and schedulers • Worker processes Concurrency & runtime • Async/await • Promises and callbacks • Thread pools • Process and memory management • Garbage collection Quality & tooling • Testing (unit, integration, E2E) • Mocking and stubbing • API documentation (Swagger / OpenAPI) • Postman or Insomnia • Git and version control • Code reviews • Debugging and benchmarking Production • Deployment strategies • Monitoring in production Once you grasp these, backend stops being “mysterious” and starts becoming systematic.
@aditiitwt ·
Here's the list of 22 chrome Extensions Every Developer Should Know 1. SingleHire – Find contact details of founder 2. Ghostery – Enhance privacy while browsing 3. uBlock Origin – Block ads & improve performance 4. daily(dot)dev – Stay updated with dev news 5. Lighthouse – Analyze performance, SEO, and accessibility 6. Web Developer – Adds helpful dev tools to your browser 7. CSS Peeper – Inspect CSS styles quickly 8. Apollo(dot)io – Find emails, contact number & company data 9. VisBug – Edit UI directly on any website 10. Octotree – Better GitHub code navigation 11. PerfectPixel – Compare design with pixel precision 12. Fonts Ninja – Identify fonts instantly 13. Window Resizer – Test responsive layouts 14. GoFullPage – Capture full-page screenshots 15. Check My Links – Find broken links quickly 16. ColorZilla – Pick colors from any webpage 17. Session Buddy – Manage and restore tabs 18. Cursorful – Screen recording + quick video editing for dev demos 19. React Developer Tools – Inspect React component hierarchy 20. Tampermonkey – Run custom scripts on websites 21. Wappalyzer – Identify technologies used on websites 22. JSON Viewer – Format and view JSON easily
@foley_seo ·
Optimizing your site for SEO & for LLMS? It's CRUCIAL that user-agents / bots are actually able to see the rendered output. Not all tech stacks are suitable out of the box - JS tech stacks are notorious for: 1. Not being easy to render even for Googlebot which can render JS but isn't overly efficient at it 2. Not being suitable for LLMs to crawl / ingest content Want to know if your site is? 1. Visit a page on your website, hit F12 and open DevTools 2. Press CTRL + SHIFT + P 3. Type Javascript and click Disable Javascript 4. Click NETWORK in the header menu of devtools 5. Ensure Preserve Log and Disable Cache are set 6. Now on your website URL append ?test and hit enter 7. On your network tab, click DOC (shown with red box in image) 8. Where it says NAME you should see ?test, click it 9. Click on RESPONSE tab (shown with red box in image) This will show you the OUTPUT of what an LLM would see. Google CAN render Javascript but, not all Javascript tech stacks are the same - if you want to see the RAW TEXT OUTPUT, do the following: In the bottom half of DevTools you will see menu items "Console, Issues, Coverage" etc. click on CONSOLE (selected by default). Click the CLEAR icon (circle with line through it) Copy and paste this command into console and hit ENTER: const text = document.body.innerText; for (let i = 0; i < text.length; i += 1000) { console.log(text.slice(i, i + 1000)); } This will show you the RAW, NON JS output of your URL. THIS is the content that LLMS will see, and potentially Google/other search engines if there are any issues with SSR. IF YOU ARE USING JS based tech stacks you SHOULD consider SSG (static site generation) or pre-render. Effectively you want to MAXIMISE the output of RAW TEXT/HTML in the dom post JS processing before that document output is served. The amount of SITE OWNERS who have these fancy tech stacks are often oblivious to the risks/issues with using JS for a web app / site framework. Here are some solutions based on common platforms: React Next.js – [SSG + SSR + ISR] Most popular for React, supports hybrid static rendering and server-side rendering Gatsby Fully static, React-based. Uses GraphQL for data and pre-renders everything at build time Astro Partial hydration. You can use React components but ship less JS by default Vue Nuxt Offers static site generation (nuxt generate) as well as server-side rendering VitePress Lightweight Vue-based SSG, ideal for docs and content-driven sites VuePress Vue-powered static site generator, originally designed for documentation Svelte SvelteKit Can be configured for full SSG, SSR, or hybrid deployment. Excellent for fast, SEO-friendly output Elder.js Performance-focused SSG for Svelte apps (less common now but still useful) Angular Scully The go-to SSG for Angular. Pre-renders Angular apps into static HTML Analog.js Newer project aiming to bring Next.js-like DX to Angular with SSR and SSG #seo #seo2025 #aiseo
@0xlelouch_ ·
90% of frontend engineering in 2026 comes down to mastering these 10 concepts: 1) Browser runtime model. Event loop, microtasks, layout/paint, and why one long task makes the app feel broken. 2) Network + caching. HTTP caching, CDNs, ETags, stale-while-revalidate, and why a bad cache key ships old JS to 5% of users for days. 3) State + data fetching. Server state vs UI state, invalidation, retries, and preventing double-submits with idempotency keys. 4) Rendering tradeoffs. SSR vs CSR vs streaming, hydration costs, and how one heavy component can blow TTI on mid-range Android. 5) Performance budgets. LCP/INP/CLS, bundle splitting, image/video strategy, and measuring p75 not local dev fast. 6) Tooling + build pipeline. TS strictness, lint rules that prevent incidents, dependency drift, and reproducible builds in CI. 7) Debugging in prod. Source maps, feature flags, bisecting releases, and turning a minified stack trace into a real root cause. 8) Security basics. XSS, CSP, CSRF, clickjacking, supply chain risk, and treating innerHTML plus user content as a sev2 waiting to happen. 9) Observability. Frontend logs, RUM, trace correlation IDs, error rates by route, and sampling that still catches rare crashes. 10) Real-world failure modes. Time skew, flaky mobile networks, offline queues, race conditions between tabs, and assuming localStorage is durable when Safari decides it isn’t.
@CodeEdison ·
Backend Development Learning Roadmap |-- Programming Foundations | |-- Core Language Basics (Python, Node.js, Java, or Go) | |-- Control Flow: Conditionals & Loops | |-- Functions & Modular Design | |-- Error Handling & Exception Management | |-- Data Structures & Algorithms Fundamentals |-- Server-Side Programming | |-- Request & Response Lifecycle | |-- Routing & RESTful API Design | |-- MVC & Modular Architecture Patterns | |-- Middleware Concepts | |-- Template Engines (if applicable) |-- Databases & Storage | |-- Relational Databases (PostgreSQL, MySQL) | |-- SQL Queries, Joins, Indexes & Transactions | |-- NoSQL Databases (MongoDB, Redis) | |-- ORMs (Sequelize, SQLAlchemy, TypeORM) | |-- Caching Strategies & In-Memory Stores |-- Authentication & Authorization | |-- Session-Based Auth & Cookies | |-- Token-Based Auth: JWT, OAuth2 | |-- Role-Based & Permission Systems | |-- Secure Password Storage (bcrypt, argon2) | |-- API Key Management |-- APIs & Integration | |-- RESTful API Design Best Practices | |-- API Versioning & Documentation | |-- API Testing (Postman, Insomnia) | |-- Integrating Third-Party Services | |-- Webhooks & Event-Driven APIs |-- Asynchronous Programming | |-- Promises, Async/Await | |-- Background Workers & Task Queues | |-- Event Emitters & Pub/Sub Patterns | |-- Message Brokers (RabbitMQ, Kafka) | |-- Scheduling Jobs & Cron Tasks |-- WebSockets & Real-Time Systems | |-- WebSockets Fundamentals | |-- Real-Time Libraries (https://t.co/tmCozHoRL6, WS) | |-- Pub/Sub for Real-Time Messaging | |-- Synchronization & State Management | |-- Scaling Real-Time Systems |-- Testing & Quality Assurance | |-- Unit Testing Frameworks | |-- Integration Testing | |-- End-to-End Testing | |-- Mocking, Fixtures & Test Coverage | |-- Linting & Formatting Tools |-- Performance & Optimization | |-- Query Optimization & Indexing | |-- Caching Layers & CDN Integration | |-- Load Balancing Fundamentals | |-- Profiling & Benchmarking | |-- Memory Management & GC Tuning |-- Security Best Practices | |-- Input Validation & Sanitization | |-- Rate Limiting & Throttling | |-- CORS & CSRF Protections | |-- Secure Headers & HTTPS | |-- Secrets & Config Management |-- DevOps & Deployment | |-- Environment Configuration | |-- CI/CD Pipelines | |-- Containerization (Docker) | |-- Cloud Hosting & Platforms | |-- Monitoring, Logging & Alerts |-- Real-World Projects & Portfolio | |-- CRUD APIs & Microservices | |-- Authentication & Authorization Systems | |-- Real-Time Chat or Collaboration App | |-- E-Commerce Backend API | |-- Scalable Event-Driven Architecture |-- Continuous Learning & Growth | |-- Reading Official Docs & RFCs | |-- Community Forums & Developer Groups | |-- Open Source Contributions | |-- Keeping Up with Backend Trends & Tools
@SidJain_80 ·
Most devs “learn Node.js” Very few actually master backend Core JS - Event loop, async/await, promises - Closures, error handling Node Fundamentals - Non-blocking I/O - Streams, buffers - fs, process HTTP - REST, headers, status codes - Request/response lifecycle Frameworks - Express / Fastify - Middleware, validation, errors Databases - SQL (joins, indexes, transactions) - NoSQL basics - ORM (Prisma/Mongoose) Security - JWT, OAuth - Hashing (bcrypt) - XSS, CSRF, SQL injection Performance - Event loop bottlenecks - Caching (Redis) - Scaling basics API Design - Idempotency - Versioning - Rate limiting Async Systems - Queues (Kafka/RabbitMQ) - Background jobs Testing - Unit + integration DevOps - Docker, CI/CD - Logging, monitoring Skip the fluff. Master these and you’re production-ready
@patilvishi ·
OAuth Scopes ≠ Roles ≠ Permissions These three terms are used together in almost every modern authentication system... Yet they are one of the most misunderstood concepts in backend development. They are not interchangeable. Here is the easiest way to remember them OAuth Scopes ➜ Define what an application is allowed to access on behalf of a user. Roles ➜ Define who the user is inside your application. Permissions ➜ Define what the user is allowed to do. Quick memory trick - Scopes = App Access - Roles = User Identity in the System - Permissions = Allowed Actions --- Imagine a CRM application A sales employee logs in using Google. Step 1 OAuth Scopes The user grants: read:profile read:contacts The application can access only the approved Google resources. Scopes protect external APIs. Step 2 Roles Inside your application: Role = Sales Manager Roles describe the user's function. Examples: - Admin - Manager - Finance - Sales - Support Step 3 Permissions The role maps to permissions like: customer. read customer.update order.create invoice.approve Every request checks these permissions before allowing the operation. --- Real API Flow User ↓ OAuth Login ↓ Access Token (with Scopes) ↓ Application ↓ User Role ↓ Permissions ↓ Allow / Deny Request --- When should you use each? OAuth Scopes - Google APIs - GitHub APIs - Microsoft Graph - OAuth 2.0 - Third-party integrations Purpose: 👉 Limit what an application can access. Roles - Employee hierarchy - Customer types - Admin portals - SaaS applications Purpose: 👉 Group users with similar responsibilities. Permissions - Delete Order - Refund Payment - View Salary - Edit Product - Approve Invoice Purpose: 👉 Control individual actions with fine-grained access. --- The biggest misconception Many developers think: A role is just another permission. Not quite. A Role is simply a collection of permissions. For example: Admin ├── user. read ├── user.update ├── user.delete └── order.approve Permissions are what the system actually checks. Roles just make managing those permissions easier. --- Another common mistake Many developers put Roles inside OAuth Scopes. They solve different problems. Scopes answer: What can this application access? Roles answer: Who is this user? Permissions answer: Can this user perform this action? --- One sentence to remember forever - Scopes limit the application. - Roles classify the user. - Permissions authorize the action. --- The strongest authorization systems don't rely on just one of these... They combine all three: ✔️Scopes protect external API access. ✔️Roles simplify user management. ✔️Permissions enforce fine-grained security. Thats how modern systems built with OAuth 2.0, OpenID Connect, Spring Security, and enterprise IAM platforms handle authorization at scale.
@TeeDevh ·
Real tech stacks from builders on X (March 2026) → @marc_louvion Next.js + Tailwind + Supabase + Vercel → @levelsio PHP + jQuery + SQLite (10+ years, still running strong) → @yongfook Ruby on Rails + jQuery → @dannypostmaa_ Next.js + Supabase + AI APIs → @tdinh_me Next.js + simple SaaS stack The "indie stack" I see everywhere in 2026: → Next.js + Tailwind → shadcn/ui → Supabase / Firebase → Polar / Lemon Squeezy / Stripe . → AI tools (Cursor, Codex, ClaudeCode, etc.) Who's your favorite builder? Drop their stack 👇
@0xlelouch_ ·
90% of frontend engineering in 2026 comes down to mastering these 10 concepts: 1) HTTP + caching semantics ETag, Cache-Control, Vary, CDN behavior. Most “frontend latency” bugs are caching bugs. 2) Rendering + hydration costs SSR/CSR/streaming are tradeoffs. Know when you’re paying in TTFB, JS parse, or hydration stalls. 3) State and data fetching discipline Idempotent mutations, retries, pagination, optimistic UI, and cache invalidation without ghost data. 4) Performance budgets, not vibes Measure LCP/INP/CLS, long tasks, bundle size. A 200kb “small” dependency can blow INP on mid phones. 5) Tooling and build pipeline literacy Vite/Webpack/Rollup, source maps, tree-shaking, code splitting. Debug why a module is suddenly in the critical path. 6) Browser platform fundamentals Event loop, layout/paint/composite, IntersectionObserver, timers. Fix jank by knowing what triggers reflow. 7) Security basics that actually ship XSS, CSP, CSRF, trusted types, cookie flags. Sanitizing HTML is not a plan, it’s a liability. 8) Observability from the client Correlation IDs, RUM, error boundaries, session replay sampling. Tie a frontend error to a backend trace. 9) Debugging in production constraints Reproduce with real headers, locales, timezones, and flaky networks. Source maps access and PII redaction matter. 10) Real-world failure modes Race conditions, double submits, stale closures, aborted requests, 429 backoffs. Most incidents look like “works on my Wi-Fi”
@suni_code ·
internet basics ↓ html ↓ css ↓ javascript ↓ git & github ↓ how the browser works (most important) ↓ http / https ↓ react ↓ typescript ↓ state management ↓ next.js ↓ node.js ↓ express ↓ databases (postgres / mongodb) ↓ orm (prisma / drizzle) ↓ rest apis / graphql ↓ authentication (jwt / oauth) ↓ caching (redis) ↓ file uploads & storage ↓ websockets / realtime ↓ testing ↓ docker ↓ ci/cd ↓ system design ↓ cloud (aws / gcp / azure) ↓ monitoring & logging Now you are ready to go. 🥳 Build Projects from here and apply as much as you can.
@ManningBooks ·
What if your stack is doing more work than your app? Modern browsers already handle a lot — routing, UI patterns, even app installs. Vanilla Web by @firt shows how to build real apps with plain JS, HTML, and CSS. You get less tooling with more control. Learn more: https://t.co/I6AMDRB5dl
@Shruti_0810 ·
Master CSS CSS MASTER TREE │ ├── 1. CSS Fundamentals │ ├── What is CSS │ ├── CSS Syntax │ ├── CSS Types │ │ ├── Inline CSS │ │ ├── Internal CSS │ │ └── External CSS │ └── CSS Comments │ ├── 2. Selectors │ ├── Basic Selectors │ │ ├── Element │ │ ├── Class │ │ └── ID │ ├── Combinators │ │ ├── Descendant │ │ ├── Child │ │ ├── Adjacent Sibling │ │ └── General Sibling │ ├── Attribute Selectors │ └── Pseudo │ ├── Pseudo-classes │ └── Pseudo-elements │ ├── 3. Box Model │ ├── Content │ ├── Padding │ ├── Border │ ├── Margin │ └── box-sizing │ ├── 4. Layout │ ├── display │ │ ├── block │ │ ├── inline │ │ ├── inline-block │ │ ├── none │ │ └── contents │ ├── position │ │ ├── static │ │ ├── relative │ │ ├── absolute │ │ ├── fixed │ │ └── sticky │ ├── float / clear │ └── z-index │ ├── 5. Flexbox │ ├── flex container │ ├── flex direction │ ├── justify-content │ ├── align-items │ ├── align-content │ ├── flex-wrap │ └── flex-grow / shrink / basis │ ├── 6. Grid Layout │ ├── grid container │ ├── grid-template │ ├── grid-gap │ ├── grid-area │ ├── grid-column │ └── grid-row │ ├── 7. Typography │ ├── font-family │ ├── font-size │ ├── font-weight │ ├── line-height │ ├── letter-spacing │ └── text-align │ ├── 8. Colors & Backgrounds │ ├── color formats │ │ ├── HEX │ │ ├── RGB │ │ ├── HSL │ │ └── Named colors │ ├── background-color │ ├── background-image │ ├── background-position │ ├── background-size │ └── gradients │ ├── 9. Responsive Design │ ├── Media Queries │ ├── Mobile First │ ├── Breakpoints │ ├── Responsive Units │ │ ├── % │ │ ├── vw / vh │ │ └── rem / em │ └── Fluid Layouts │ ├── 10. Transforms │ ├── translate │ ├── rotate │ ├── scale │ └── skew │ ├── 11. Transitions │ ├── transition-property │ ├── transition-duration │ ├── transition-delay │ └── transition-timing-function │ ├── 12. Animations │ ├── animation-name │ ├── animation-duration │ ├── animation-delay │ ├── animation-iteration-count │ └── animation-direction │ ├── 13. Variables │ ├── CSS Custom Properties │ ├── var() │ └── Global vs Local Scope │ │── 14. Advanced CSS │ ├── CSS Functions │ │ ├── calc() │ │ ├── clamp() │ │ └── min() / max() │ ├── Filters │ ├── Backdrop Filter │ ├── Object-fit │ └── Aspect-ratio │ ├── 15. Preprocessors │ ├── Sass / SCSS │ ├── Less │ └── Stylus │ ├── 16. Frameworks & Tools │ ├── Tailwind CSS │ ├── Bootstrap │ ├── PostCSS │ └── Autoprefixer │ ├── 17. Performance │ ├── Minification │ ├── Critical CSS │ ├── Lazy Loading Styles │ └── Reducing Reflows │ └── 18. Best Practices ├── BEM Naming ├── SMACSS ├── OOCSS └── Maintainable CSS
@prayag_sonar ·
🚨 Most people don’t fail full stack because it’s hard. They fail because they learn in random order. A simple roadmap (Beginner → Job Ready): 1️⃣ Frontend Basics: HTML5 (page structure) CSS3 (styling) JavaScript ES6+ (logic) Responsive Design (mobile-friendly UI) DOM (interactivity) Build: Landing Page, Portfolio 2️⃣ Frontend Development: React (UI library) Components (reusable code) Props (data passing) State (data management) Hooks (React features) React Router (navigation) Context API (global state) API Integration (fetch data) Build: To-do App, Weather App, Blog 3️⃣ Backend Development: Node.js (JavaScript runtime) Express.js (web framework) REST APIs (backend services) Middleware (request processing) MVC (project structure) Error Handling (reliability) Build: REST API, Notes API, Auth API 4️⃣ Database: MongoDB (NoSQL database) Mongoose (ODM) CRUD (Create/Read/Update/Delete) Aggregation (advanced queries) Build: Connect API with Database 5️⃣ Tools & Technologies: Git & GitHub (version control) Postman (API testing) VS Code (editor) npm/yarn (package manager) .env (secret management) JWT (authentication) bcrypt (password hashing) Focus: Version Control, Testing & API Security 6️⃣ Advanced Concepts: Authentication (login) Authorization (roles & permissions) File Upload (media handling) Error Handling (stability) CORS (cross-origin access) Environment Variables (configuration) Focus: Secure & Scalable Apps 7️⃣ Build Projects: Full Stack Blog (content management) E-commerce (payments & orders) Real-time Chat (WebSockets) Admin Dashboard (analytics) Goal: 3–5 production-ready projects 8️⃣ Career Ready: DSA (problem solving) Resume (ATS-friendly) Portfolio (showcase work) LinkedIn (personal branding) Interview Prep (technical rounds) Job Applications (consistent outreach) 🎯 Formula: Consistency + Practice = Success
@LeaVerou ·
Some claim that web standards no longer matter now that an increasing percentage of code is written by AI. If developers are not the ones writing code, who cares whether those languages and APIs are well-designed? I beg to differ. In fact, I think it now matters more than ever! Hear me out. AI is effectively a new type of web developer — a user of web technologies with its own constraints and user needs. Some overlap with humans. Many don’t. But one thing still holds true: how well web technologies cater to user needs directly affects how efficiently they can be learned, composed, used, and verified. Usability has always struggled with quantification. We could describe friction, but mapping it cleanly to cost was hard. But when the user is an AI, there is now a direct metric of user effort, and it maps cleanly to financial cost: tokens! Try this experiment: Compare how many tokens @claudeai uses on a front-end project with complex UI interactions and implicit state, versus a similarly sized Node.js CLI application with explicit data flow. In my experience, the difference in tokens used, accuracy, and iterations necessary, is dramatic. API design affects how *much* of the codebase an AI agent needs to traverse to understand what’s going on. It affects whether the relevant pieces fit in context windows. It affects how confidently they can verify correctness. All of these translate *directly* to cost and reliability. We’re still in the early days. We’ve spent decades refining design principles for humans, and we’re still not done. Figuring out what design principles we should follow to make languages and APIs learnable, efficient, and safe *for AIs as well* is a whole new (exciting) field of study. But *what* the principles are is orthogonal to *how much* they matter. The latter seems clear to me: In a world where code is increasingly generated, how could the quality of our code interfaces matter *less*? Quite the contrary — it compounds!
@greensock ·
💚 Site of the Day - JLern Design https://t.co/OiD0bNouo5 showcases the portfolio of web developer and animator, Justin Lerner. In a single page format, the focus is on engaging the user with playful interaction and movement while putting the developer's skill set on display. credit: Justin Lerner (https://t.co/EYLUQ0CaiV) ⚙️ DrawSVG SplitText site → https://t.co/0fjtt4vU8L showcase → https://t.co/V1TZUeSMqn
@subinium ·
> Since 2026, our organization (@hashed_official) is going through AI transition very rapidly. As an dev, I'm onboarding about 10+ members into vibecoding through 1:1 sessions. > Including partners with dev/founder backgrounds who already vibecode and some members who study on their own, over 70% of the company now does vibecoding. What's notable is that 70% of them come from non-dev backgrounds, encountering development and terminal for the very first time. > The first hour covers: choosing vibecoding tools (SaaS, IDE, CLI), basic terminal commands (cd, ls, mkdir, clear, etc), foundational understanding of claude code features, understanding frontend/backend/database, simple local web development, and deployment via vercel or railway. > From there, they learn cc's modes, plugins, settings, and many other features one by one, while also picking up programming knowledge like frameworks, libraries, APIs, OAuth, etc. > Quickly understanding developer term isn't easy, but their learning curve is remarkably fast given their will. Will is a booster for top down comprehension. > They all have GitHub accounts now, and discussions around collaboration structures are starting to emerge. > For reference, our organization covers AI costs and the boss vibecodes the hardest. Thanks to super boss, @simonkim_nft
@ATechAjay ·
Frontend Engineer Roadmap 🚀 Step 1: Internet Basics — Internet — DNS — HTTP & HTTPS — Browser — Domain & Hosting Step 2: HTML — Basic Tags — Semantic HTML — Forms — Tables — Accessibility Basics Step 3: CSS — Selectors — Box Model — Flexbox — Grid — Position — Responsive Design — Animations Step 4: JavaScript — Variables — Functions — Arrays & Objects — DOM — Async JavaScript — Fetch API — ES6+ — Event Loop Step 5: TypeScript — Types — Interfaces — Generics — Utility Types Step 6: React — Components — JSX — Props & State — Hooks — Context API — React Router Step 7: Next.js — App Router — Server Components — API Routes — SSR — SSG Step 8: Styling — Tailwind CSS — CSS Modules — shadcn/ui Step 9: Quality — Accessibility — Performance — Playwright — AI-assisted Verification — Managed QA (Bug0) Step 10: Git & Deployment — Git — GitHub — Vercel — CI/CD Step 11: Build Projects — Dashboard — SaaS — Portfolio — Clone Projects Now start applying. Good luck 🚀
@avrldotdev ·
I have seen an emerging sentiment that Frontend development is dead because AI can do it very easily. But frontend is not just about placing boxes on the screen. There's a lot more to it behind the scenes. There's state & perf management, business logic, accessibility & what not. While AI can easily scaffold & write a component, it cannot alone write a maintainable, scalable frontend that can run on any device in different network conditions & configurations. AI will take you 80% there, but the last 20% is what makes or breaks the UX & scalability of your app for thousands of users.
@tapasadhikary ·
If you are into web development now, consider these: => How to handle UI Performance? => Accessibility aspects => How to handle security concerns? => Making the App responsive => Scaling by users and developers => Edge cases Agents are helping to write code; you have to be better at thinking big.
@ainativedev ·
An agent cannot read your website. And that needs to change. In this episode of AI Native Dev, @guypod sits down with Maximiliano Firtman (@firt), 30-year web developer and author of 14 books, to talk about what building for the web looks like when traffic comes from agents and humans both. They get into: • why AI agents taking screenshots of your website is inefficient and expensive • what Web MCP is and how it gives agents a direct API into your website • how a 200MB Apple model running offline is opening up a whole new category of web apps • why every vibe coded app is a web app and what that means for the future of the web Your next visitor might not be human. Are you ready for that? (0:00) Trailer (1:19) AI DevCon (2:13) Introduction and Vanilla Web (6:25) WebMCP: what it is and why it matters (8:01) How agents browse websites today (10:20) Why screenshot-based browsing is inefficient (11:43) Exposing JavaScript functions to agents (14:41) User confirmation and trust delegation (16:52) WebMCP vs traditional APIs (18:00) Client-side use cases like Apple Pay (19:33) Headless browsers and playwright (22:47) WebMCP vs standard MCP (25:57) Declarative HTML version (27:16) Detecting when an agent controls your site (29:08) Who should adopt Web MCP first (33:03) WebMCP for end-to-end testing (36:44) Local models in the browser (39:12) Chrome's built-in Gemini Nano (42:38) WebAssembly, WebGPU and neural network APIs (45:47) Cost, latency and privacy benefits (47:03) Small models for specific tasks (50:28) Who's using client-side AI today (53:55) Browser sandboxing and security (56:49) The future of web apps and local AI (59:37) Wrap-up
@SumitM_X ·
As a frontend developer In 2026 , Make sure you have covered performance. Interviewers won’t ask "what is React.memo" now.. They will expect you to more about performance.. Things every React js candidate should cover 👇 In Measurement & profiling: React DevTools Profiler Chrome Performance tab Web Vitals Lighthouse For Re-render control : React.memo useCallback useMemo Keys & reconciliation For Concurrency & UX : useTransition useDeferredValue Suspense For Code splitting & bundles : lazy loading Dynamic imports Bundle analyzers Tree shaking For State & data : React Query / TanStack Query Lists & rendering Virtualization (react-window / react-virtualized) Lazy rendering IntersectionObserver In Network & runtime : Debounce / throttle Caching strategies Service workers CDN usage
@Dominus_Kelvin ·
I have seen many follies under the sun: Graphic designers calling themselves UX designers because they learned Figma. People learning frontend or backend, but never learning the web development. Startups adopting microservices before acquiring customers. Teams adding Kubernetes to applications one VPS could comfortably run. Developers choosing databases by social media popularity. Founders paying cloud bills that could employ another engineer. Buttons pretending to be links. localStorage pretending to be a database. Activities around work pretending to be work. And junior developers planning on remaining juniors Vanity of vanities. There is nothing new under the cloud.
@priyankapudi ·
I was mass consuming every new AI tool, every new framework drop, every hot take on 𝕏 . Felt like I was falling behind every single day. Then I zoomed out and looked at the history of dev: Found out that, developers aren't burned out because tech moves too fast. They're burned out because they chase tools instead of understanding fundamentals. Every era of web dev follows the same pattern: → things get easier → expectations rise → people with strong basics adapt → people who skipped them struggle. It happened with CSS replacing table layouts. It happened with React replacing jQuery. It's happening now with AI replacing boilerplate. The competition was never "coders vs AI users." It's people who just prompt and hope vs people who understand what the AI is actually doing. Stop doom-scrolling new tools. Learn the fundamentals. Build something. Atleast something small...
@FrancescoCiull4 ·
Since I'll be at home for the incredible span of 4 weeks, I'll be going live and recording videos much more often (I mean more often than usual). We start today at 6 PM CEST with my favorite topic: Rust and Web Development. Back in 2022, when I started creating content about Rust and web development, this was a super niche topic. But lately, especially with the rise of AI models that make many implementation details almost trivial, it's become one of the most requested topics on my channel. So here we go: a whole month of Rust and web development! We'll talk about project structure, crates, the best (and worst) frameworks to use, and of course we'll build real projects using the latest AI models (and, of course, Zerops). Today, 6pm cest, we will focus on @grok and Axum (and on the why it has not a logo yet). I'm really excited for these next 4 weeks because, although I love meeting people in person, conference season can be exhausting. Sometimes it's nice to just switch on the camera, have fun, and build cool things together. If you like this idea and want to learn Rust and web development from someone who's been doing it for over 4 years, set your reminder. (Live on X and YT)
@piyush784066 ·
Your Journey to Becoming a Full Stack Developer Stage 1 – HTML Lay the foundation. Learn how the web is structured. Stage 2 – CSS Bring your ideas to life with styling, layouts, and responsiveness. Stage 3 – Git + GitHub Master version control and showcase your work like a pro. Stage 4 – Build Your First Project Apply what you’ve learned. Start simple, but make it real. Stage 5 – JavaScript Add interactivity and logic. Make your websites dynamic. Stage 6 – Choose Your Framework Pick your weapon: React | Vue | Svelte | Angular Stage 7 – Build Another Project Level up with a modern frontend project. Stage 8 – Node.js Step into backend development and server-side logic. Stage 9 – Databases Work with data using MySQL or MongoDB Stage 10 – Create APIs Connect frontend and backend. Build real-world systems. Stage 11 – Build a Full Stack Project Bring everything together into one powerful application
@victorokolie_ ·
One of the biggest misconceptions in web development: HTTP ≠ insecure, HTTPS ≠ a secure application. HTTPS simply means your communication with the server is encrypted using TLS. It protects data while it's traveling across the internet, preventing attackers from intercepting or modifying it in transit. That's where its job ends. HTTPS doesn't stop SQL injection. It doesn't prevent XSS. It doesn't fix CSRF. It doesn't secure your APIs. It doesn't enforce authorization. It doesn't protect against IDOR. It doesn't prevent broken authentication. It doesn't patch vulnerable backend code. I've seen applications proudly display the padlock icon while exposing sensitive endpoints, relying on client-side validation, or allowing users to access resources they shouldn't. The padlock tells users their connection is secure. It says nothing about whether your application is. TLS secures the connection. Secure backend engineering secures the application. Know the difference.
@TosinOlugbenga ·
There are many technical concepts you will never know as a software engineer until you work in a structured big company. In a simple term, what are the observability tools you need to know as a frontend engineer? How do you know how your frontend applications perform? How are server errors communicated to you? How do you know which of the APIs you are consuming is returning errors behind the scenes?
@_devEmmy ·
Ever heard developers say “it works on my machine” but the app fails on the server? That’s one of the problems Docker was created to solve. Docker is a containerization tool that allows you to package your application together with all its dependencies (libraries, runtime, system tools) into a container. This container can run anywhere, your laptop, a teammate’s system, a staging server, or production and behave the exact same way. Instead of manually installing dependencies on every machine, Docker ensures the environment is consistent and reproducible. Here’s a simple Docker setup guide: 1. Install Docker Download and install Docker from the official Docker website. 2. Create a Dockerfile A Dockerfile is a configuration file that tells Docker how to build your application image (what base image to use, dependencies to install, and how to run the app). 3. Build the Docker Image This converts your Dockerfile into a runnable image. docker build -t your-app-name . 4. Run the Container Run your application inside a Docker container. docker run -p 8000:8000 your-app-name 5. Push to Docker Hub (optional) Docker Hub acts like a repository for Docker images so they can be pulled and deployed anywhere. docker tag your-app-name username/your-app-name docker push username/your-app-name Simple flow: Code → Dockerfile → Build Image → Run Container → Deploy anywhere. This is why Docker is widely used in modern backend development, CI/CD pipelines, and cloud deployments. Bookmark & repost so you can always come back to this guide 🚀
@TheJobfather__ ·
Front-end development is not only making something look pretty. It is usability, accessibility, responsiveness, performance, content structure, and helping people complete tasks without friction. If your portfolio only shows visuals, add the thinking behind the interface. Employers need to see that you understand the user, not just the screen.
@TosinOlugbenga ·
Vibe coders need to know that frontend development is more than making screens look good (most time AI design terrible UIs). Questions experienced frontend engineers ask: • How is state managed? • How does data flow through the app? • What re-renders and when? • How do we prevent performance bottlenecks? The UI is often the easiest part and that’s what AI is good at.
@MakadiaHarsh ·
web development 4 years ago vs now. - hosting is now edge deployment - custom code is now ai-assisted builds - design handoffs are now component systems - manual testing is now automated qa - client briefs are now ai-scoped projects - integrations are now no-code pipelines - support docs are now ai knowledge bases - mvps took 6 months, now take 6 weeks the way we build software has already changed.
Best Tweets by Topic