https://joelcodja.com/blog/ Notes from building things. en https://joelcodja.com/blog/the-best-transactional-email-services-in-2026/ https://joelcodja.com/blog/the-best-transactional-email-services-in-2026/ Password resets, receipts and sign-in codes have to arrive. Here are seven ways to send them from your app, starting with the one that keeps your data and your provider in your hands. Fri, 23 Oct 2026 00:00:00 GMT Tools https://joelcodja.com/blog/validating-api-input-with-zod-in-typescript/ https://joelcodja.com/blog/validating-api-input-with-zod-in-typescript/ TypeScript checks nothing once your app is running. Here is how to validate request bodies, environment variables and API responses with one Zod schema that also gives you the type. Fri, 18 Sep 2026 00:00:00 GMT TypeScript Backend https://joelcodja.com/blog/why-i-use-drizzle-for-every-typescript-backend/ https://joelcodja.com/blog/why-i-use-drizzle-for-every-typescript-backend/ Raw SQL has no types, and heavy ORMs hide the SQL. Drizzle sits in between: you write TypeScript that reads like SQL, and every query is typed from your schema. Fri, 04 Sep 2026 00:00:00 GMT TypeScript Tools https://joelcodja.com/blog/aes-256-gcm-encryption-at-rest-in-nodejs/ https://joelcodja.com/blog/aes-256-gcm-encryption-at-rest-in-nodejs/ TLS stops protecting your data once it reaches the database. Here is how to encrypt sensitive fields yourself, with Node's native crypto module. Wed, 15 Jul 2026 00:00:00 GMT Security