Name: Node Congress 2023
Start: 2023-04-14T07:00:00.000Z
End: 2023-04-17T19:00:00.000Z

Lera

Sophie Kolbe

  Neha  Seth

Marco Ippolito

Shivay Lamba

 Claudio Wunder

Batuhan NARCI

David Barry

Nick Taylor

Ricardo Machado

Tally Barak

John Nguyen

Jeroen van Wissen

Robert

João Portela

Charles

Ian Sutherland

Creatopy Tech

Dariusz

Aman Beg

Alex Hayton

Ö. BURAK KARATAŞ

Jan Pfeiffer

Vitor Barbosa

Gergana Rangelova

Rishi Narang

Alex Perez

Lia Moreira

Varun

Va Da

Deno 2.0 está a punto de llegar y trae consigo grandes cambios para el entorno de ejecución de JavaScript. En esta charla, presentaremos las nuevas características, incluyendo mapas de importación, auto-descubrimiento de package.json y especificadores desnudos. Discutiremos cómo estas mejoras ayudarán a abordar problemas como las dependencias duplicadas y las dependencias que desaparecen. Además, profundizaremos en el soporte incorporado para los especificadores de deno en el registro deno.land/x y su papel en proporcionar un camino recomendado para la publicación. Ven a aprender cómo estas actualizaciones darán forma al futuro del ecosistema de JavaScript y mejorarán la compatibilidad con las aplicaciones Node.

Deno 2.0

The Talk discusses forced optimization with Node and Deno, with Deno aiming to pursue the same goals in a more expansive and modern way. Deno has built-in support for NPM and enforces security constraints. It also has a key-value database called Deno KV, which will be a core part of the Deno 2 API. Deno Deploy is a serverless Edge Functions platform powered by FoundationDB, optimized for fast reading and ideal for building eCommerce sites or application servers at the edge. Deno 2.0 is coming soon with more features under development.

Deno 2.0 is imminent and it's bringing some big changes to the JavaScript runtime. In this talk, we'll introduce the new features including import maps, package.json auto-discovery, and bare specifiers. We'll discuss how these improvements will help address issues like duplicate dependencies and disappearing dependencies. Additionally, we'll delve into the built-in support for deno: specifiers on the deno.land/x registry and its role in providing a recommended path for publishing. Come learn about how these updates will shape the future of the JavaScript ecosystem and improve backwards compatibility with Node applications.

Ryan Dahl

En mi viaje por Nodeland, vi a la mayoría de los equipos luchando con la naturaleza libre de desarrollo de Node.js: no hay barreras para la máxima flexibilidad. Sin embargo, no todos los caminos ofrecen un viaje suave. ¿Cómo construir aplicaciones que estén bien organizadas, sean probables y extensibles? ¿Cómo podríamos construir un código que resistiera la prueba del tiempo? En esta charla, exploraremos cómo evitar la trampa de los Singletons para crear aplicaciones robustas de Node.js a través del uso de plugins de Fastify: ¡construiremos un monolito modular!

Construyendo un monolito modular con Fastify

Fastify is a powerful tool for building web applications and APIs in Node.js, with millions of downloads per month. It promotes encapsulation and structuring through plugins and decorators, allowing for code and data segmentation. The talk emphasizes the importance of modularizing applications by domains and features, and showcases a demo of a typical Fastify application. The speaker also discusses the benefits of using Platformattic for refactoring and launching Fastify applications in the cloud. The Q&A section covers topics such as dependency injection and debugging, while also highlighting the importance of separating business logic from API contracts.

In my journey through Nodeland, I saw most teams struggling with the free-form nature of Node.js development: there are no guardrails for maximum flexibility. Yet, not all paths offer a smooth ride. How to build applications that are well-organized, testable, and extendable? How could we build a codebase that would stand the test of time? In this talk, we will explore how to avoid the trap of Singletons to create robust Node.js applications through the use of Fastify plugins: we will build a modular monolith!

Building a modular monolith with Fastify

Matteo Collina

En esta charla explico cómo funciona el servicio AWS Lambda, explicando la arquitectura, cómo escala y cómo un desarrollador debería pensar cuando diseñan su software utilizando funciones Lambda

AWS Lambda bajo el capó

In this Talk, key characteristics of AWS Lambda functions are covered, including service architecture, composition, and optimization of Node.js code. The two operational models of Lambda, asynchronous and synchronous invocation, are explained, highlighting the scalability and availability of the service. The features of Lambda functions, such as retries and event source mapping, are discussed, along with the micro VM lifecycle and the three stages of a Lambda function. Code optimization techniques, including reducing bundle size and using caching options, are explained, and tools like webpack and Lambda Power Tuning are recommended for optimization. Overall, Lambda is a powerful service for handling scalability and traffic spikes while enabling developers to focus on business logic.

In this talk I explain how the AWS Lambda service works explaining the architecture, how it scales and how a developer should think about when they design their software using Lambda functions

AWS Lambda under the hood

Luca Mezzalira

Los Durable Objects, parte de la plataforma Cloudflare Workers, son la solución para un almacenamiento y coordinación fuertemente consistentes en el borde. En esta charla, aprenderás sobre los Durable Objects, por qué son adecuados para casos de uso colaborativos y cómo construir aplicaciones multijugador con ellos!

Construyendo Aplicaciones Multijugador con Cloudflare Workers y Durable Objects

Durable Objects are a part of CloudFlare's long-term goal to expand application possibilities on workers, allowing for the building of scalable collaborative applications. Durable Objects provide a way to store global state and coordinate multi-client applications. They can be created as close to the user as possible and have unique IDs for routing requests. Durable Objects have a persistent storage API with strongly consistent semantics and IO gates to prevent correctness errors. They are well-suited for collaborative applications and can be used with WebSockets. Performance impact and read replicas are considerations for accessing Durable Objects globally.

Durable Objects, part of the Cloudflare Workers platform, are the solution for strongly consistent storage and coordination on the edge. In this talk, you will learn about Durable Objects, why they are suited for collaborative use-cases, and how to build multiplayer applications with them!

Building Multiplayer Applications with Cloudflare Workers & Durable Objects

Matt Alonso

Varias apis y varios equipos en el mismo repositorio pueden causar muchos dolores de cabeza, pero Nx te tiene cubierto. Aprende a compartir código, mantener archivos de configuración y coordinar cambios en un monorepo que puede escalar tanto como tu organización. Nx te permite dar estructura a un repositorio con cientos de colaboradores y elimina las desaceleraciones de CI que normalmente ocurren a medida que crece la base de código. Índice de contenidos:- Laboratorio 1 - Generar un espacio de trabajo vacío- Laboratorio 2 - Generar una api de node- Laboratorio 3 - Ejecutores- Laboratorio 4 - Migraciones- Laboratorio 5 - Generar una biblioteca de autenticación- Laboratorio 6 - Generar una biblioteca de base de datos- Laboratorio 7 - Añadir un cli de node- Laboratorio 8 - Limites de módulo- Laboratorio 9 - Plugins y Generadores - Introducción- Laboratorio 10 - Plugins y Generadores - Modificación de archivos- Laboratorio 11 - Configuración de CI- Laboratorio 12 - Caché distribuida

Monorepos de Node con Nx

This workshop explores Node Monorepos with NX, highlighting the benefits of monorepos and NX in managing complexity, code sharing, and dependency management. It covers creating and using libraries, setting up module boundaries, linting, and CI/CD integration. The workshop also introduces NX Cloud, which offers distributed caching and task execution for improved performance. Overall, the workshop provides practical insights and tools for efficient software development and engineering in a monorepo environment.

Multiple apis and multiple teams all in the same repository can cause a lot of headaches, but Nx has you covered. Learn to share code, maintain configuration files and coordinate changes in a monorepo that can scale as large as your organisation does. Nx allows you to bring structure to a repository with hundreds of contributors and eliminates the CI slowdowns that typically occur as the codebase grows. Table of contents:- Lab 1 - Generate an empty workspace- Lab 2 - Generate a node api- Lab 3 - Executors- Lab 4 - Migrations- Lab 5 - Generate an auth library- Lab 6 - Generate a database library- Lab 7 - Add a node cli- Lab 8 - Module boundaries- Lab 9 - Plugins and Generators - Intro- Lab 10 - Plugins and Generators - Modifying files- Lab 11 - Setting up CI- Lab 12 - Distributed caching

Node Monorepos with Nx

Isaac Mann

Un vistazo temprano al uso de componentes de servidor a través del nuevo empaquetador de Bun, con y sin React.

Componentes de Servidor con Bun

Bun is a modern JavaScript runtime environment that combines a bundler, transpiler, package manager, and runtime. It offers faster installation of NPM packages and execution of package.json scripts. Bun introduces a new JavaScript and TypeScript bundler with built-in support for server components, enabling easy RPC with the client. This allows for code splitting and running code that streamingly renders React or any other library from the server and mixes it with client code, resulting in less JavaScript sent to the client.

An early look at using server components via Bun’s new bundler, with and without React.

Server Components with Bun

Jarred Sumner

V8 proporciona la capacidad de capturar una instantánea de un montón inicializado y rehidratar un montón a partir de la instantánea en lugar de inicializarlo desde cero. Uno de los casos de uso más importantes de esta característica es mejorar el rendimiento de inicio de una aplicación construida sobre V8. En esta charla vamos a echar un vistazo a la integración de las instantáneas de inicio de V8 en Node.js, cómo se han utilizado las instantáneas para acelerar el inicio del núcleo de Node.js, y cómo las instantáneas de inicio del usuario pueden ser utilizadas para acelerar el inicio de las aplicaciones de los usuarios.

Instantáneas de inicio de Node.js

The Talk discusses the Startup Snapshot initiative in Node, which aims to improve startup performance by adding new features and optimizing initialization costs. Startup snapshots, serialized binary blobs, are used to speed up startup and can be generated for both the core and user applications. Custom snapshots allow deserializing a heap from a specified snapshot, skipping parsing and compilation. The Talk also addresses misconceptions and limitations of startup snapshots, and highlights the different use cases for heap snapshots and startup snapshots.

V8 provides the ability to capture a snapshot out of an initialized heap and rehydrate a heap from the snapshot instead of initializing it from scratch. One of the most important use cases of this feature is to improve the startup performance of an application built on top of V8. In this talk we are going to take a look at the integration of the V8 startup snapshots in Node.js, how the snapshots have been used to speed up the startup of Node.js core, and how user-land startup snapshots can be used to speed up the startup of user applications.

Node.js startup snapshots

Joyee Cheung

Durante los últimos meses, desarrollé Lyra, un motor de búsqueda de texto completo increíblemente rápido escrito íntegramente en TypeScript. Me sorprendió ver cómo podía competir con soluciones escritas en Rust, Java y Golang, todos idiomas conocidos por ser típicamente "más rápidos que JavaScript"... ¿pero es eso cierto? En esta masterclass, compartiré algunas lecciones que aprendí mientras desarrollaba aplicaciones complejas y críticas para el rendimiento en JavaScript.

Cosas que aprendí mientras escribía aplicaciones de JavaScript de alto rendimiento

This talk explores the creation of a full-text search engine in JavaScript, highlighting the challenges with existing search engines like Algolia and the advantages of using JavaScript. The speaker emphasizes the importance of code optimization and performance enhancement techniques in JavaScript. The talk also discusses the evolution of the Lyra search engine into the open-source project Orama, which offers a feature-rich and highly performant full-text search engine for JavaScript. The speaker addresses questions about language choice, scalability, and deployment, and showcases the benefits of deploying an immutable database to a CDN.

During the past months, I developed Lyra, an incredibly fast full-text search engine entirely written in TypeScript. It was surprising to me to see how it could compete with solutions written in Rust, Java, and Golang, all languages known for being typically "faster than JavaScript"... but is that even true? In this talk, I will share some lessons I learned while developing complex, performance-critical applications in JavaScript.

Things I learned while writing high-performance JavaScript applications

Michele Riva

La API AsyncLocalStorage es posiblemente una de las adiciones relativamente recientes más importantes a Node.js. Hoy en día estamos viendo implementaciones que se están agregando a otros entornos como workerd, deno y bun. Y hay un esfuerzo en marcha en TC-39 para introducir una nueva API AsyncContext en el lenguaje. Esta charla presentará el seguimiento de contexto asíncrono con AsyncLocalStorage y AsyncContext y discutirá cómo el modelo está evolucionando a medida que se implementa en múltiples plataformas.

El Camino hacia Async Context

This Talk discusses the implementation and performance improvements of the async local storage API in Node and Cloudflare Workers. It explores the concept of continuations and execution contexts and how async local storage allows for passing contextual data through async flows. The talk also highlights the challenges in implementing async local storage in Node and the need for a standardized API. The introduction of async context as a replacement for async local storage is discussed, along with its benefits and the ongoing development of the async context API.

The AsyncLocalStorage API is arguably one of the most important relatively recent additions to Node.js. Today we are seeing implementations being added to other runs such as workerd, deno, and bun. And there is an effort underway in TC-39 to introduce a new AsyncContext API to the language. This talk will introduce async context tracking with AsyncLocalStorage and AsyncContext and discuss how the model is evolving as it is being implemented across multiple platforms.

The Road to Async Context

James Snell

¿Alguna vez has tenido dificultades para diseñar y estructurar tus aplicaciones Node.js? Construir aplicaciones que estén bien organizadas, sean probables y extensibles no siempre es fácil. A menudo puede resultar ser mucho más complicado de lo que esperas. En este evento en vivo, Matteo te mostrará cómo construye aplicaciones Node.js desde cero. Aprenderás cómo aborda el diseño de aplicaciones y las filosofías que aplica para crear aplicaciones modulares, mantenibles y efectivas. Nivel: intermedio

Masterclass de Node.js

Welcome to the NojectCants backend masterclass! In this workshop, we will cover key aspects of building robust and flexible Node.js applications, including test-driven development, avoiding global state, and splitting business logic across multiple modules. We will also discuss the importance of project structure and how most tutorials can lead to unmaintainable code. Additionally, the workshop covers topics such as choosing the right testing framework for Node.js, mocking and global state, module singletons and avoiding global state, structuring applications and implementing caches, and implementing graceful shutdown for servers.

Have you ever struggled with designing and structuring your Node.js applications? Building applications that are well organised, testable and extendable is not always easy. It can often turn out to be a lot more complicated than you expect it to be. In this live event Matteo will show you how he builds Node.js applications from scratch. You’ll learn how he approaches application design, and the philosophies that he applies to create modular, maintainable and effective applications. Level: intermediate

Node.js Masterclass

Fresh es un framework web basado en Deno y estándares web construido para ejecutarse en el edge

Fresh: un nuevo framework web full stack para Deno

Today's Talk introduces Fresh, a full-stack web framework for Deno, and covers its features, such as static files, routes, and data-fetching. It also discusses middleware, error pages, and styling options. The Talk explains the Islands architecture used by Fresh to enable client interactivity. The demo showcases the use of hybrid routes and islands components, and resources for Fresh, Deno, Preact, TypeScript, and web standards are provided.

Fresh is a web framework based on Deno and Web standards built to run on the edge

Fresh: a new full stack web framework for Deno

Los productos de trazado modernos funcionan combinando diagnostics_channel con AsyncLocalStorage. Vamos a construir un tracer juntos para ver cómo funciona y qué puedes hacer para que tus aplicaciones sean más observables.

Observabilidad con diagnostics_channel y AsyncLocalStorage

Observability with Diagnostics Channel and async local storage allows for high-performance event tracking and propagation of values through calls, callbacks, and promise continuations. Tracing involves five events and separate channels for each event, capturing errors and return values. The span object in async local storage stores data about the current execution and is reported to the tracer when the end is triggered.

Modern tracing products work by combining diagnostics_channel with AsyncLocalStorage. Let's build a tracer together to see how it works and what you can do to make your apps more observable.

Observability with diagnostics_channel and AsyncLocalStorage

Stephen Belanger

Bun, Deno, y muchos otros runtimes de JavaScript han sido muy comentados, pero ¿sabes por qué? ¿Es tan fácil crear un runtime desde cero? He estado investigando el secreto detrás del poder de Node.js y por qué hay tantos nuevos runtimes de JavaScript surgiendo. Desglosando cada componente clave utilizado en Node.js he llegado a conclusiones interesantes que muchas personas solían decir mientras que en la práctica funciona un poco diferente. En esta charla, los asistentes aprenderán los conceptos utilizados para crear un nuevo runtime de JavaScript. Van a pasar por un ejemplo de cómo hacer un runtime de JavaScript siguiendo lo que está detrás de escena en el proyecto Node.js usando C++. Aprenderán la relación entre el V8 de Chrome y Libuv y qué hace que un runtime de JavaScript sea mejor que otros. Esta charla cubrirá los siguientes temas: - Qué es un motor de JavaScript - V8 - Por qué Node.js usa Libuv - Cómo crear un runtime de JS desde cero

Bun, Deno, Node.js? Recreando un runtime de JavaScript desde cero - Entender la magia detrás de Node.js

The Talk explores the magic behind Node.js and delves into its components, including V8, libuv, and the C++ bridge. It discusses the workflow and execution process, the use of NodeMod, and the understanding of console functions. The Talk also covers Node.js functions and scheduling, the introduction of runtimes, and the collaboration between JavaScript runtimes. It concludes with insights on content production, the choice of Node.js, and the inspiration behind it.

Bun, Deno, and many other JavaScript runtimes have been hyped, but do you know why? Is it that easy to make a runtime from scratch? I've been researching the secret behind Node.js' power and why there are so many new JavaScript runtimes coming up. Breaking down each key component used on Node.js I've come to interesting conclusions that many people used to say whereas in practice it works a bit differently. In this talk, attendees will learn the concepts used to create a new JavaScript runtime. They're going to go through an example of how to make a JavaScript runtime by following what's behind the scenes on the Node.js project using C++. They'll learn the relationship between Chrome's V8 and Libuv and what makes one JavaScript runtime better than others. This talk will cover the following topics: - What's a JavaScript Engine - V8 - Why Node.js uses Libuv - How to create a JS Runtime from scratch

Bun, Deno, Node.js? Recreating a JavaScript runtime from Scratch - Understand magic behind  Node.js

Erick Wendel

La masterclass se centra en conceptos, algoritmos y prácticas para descomponer una aplicación monolítica en GRPC microservices. Ofrece una visión general de los principios de arquitectura, patrones de diseño y tecnologías utilizadas para construir microservices. Cubre la teoría del marco GRPC y el mecanismo de protocol buffers, así como técnicas y especificidades de construcción de servicios TypeScript aislados en la pila de Node.js. La masterclass incluye una demostración en vivo de un caso de uso descomponiendo una aplicación API en un conjunto de microservices. Es ideal para arquitectos, líderes técnicos y desarrolladores que desean aprender patrones de microservices. Nivel: AvanzadoPatrones: DDD, MicroservicesTecnologías: GRPC, Protocol Buffers, Node.js, TypeScript, NestJS, Express.js, PostgreSQL, TurborepoEstructura de ejemplo: configuración de monorepo, configuración de paquetes, utilidades comunes, servicio de demostraciónEjercicio práctico: refactorizar aplicación monolítica

Descomponiendo Monolith NestJS API en GRPC Microservices

The workshop focused on decomposing a monolithic API into microservices using NestJS and gRPC. The speaker discussed the benefits and drawbacks of monoliths and microservices, as well as principles and architecture patterns for microservices. The process of decomposing the monolith involved refactoring the code, introducing gRPC for communication, and gradually moving parts of the monolith to separate services. The workshop also highlighted the importance of testing, CI/CD pipelines, and database decomposition. Overall, the workshop emphasized the need for careful planning and testing when decomposing a monolith into microservices.

The workshop focuses on concepts, algorithms, and practices to decompose a monolithic application into GRPC microservices. It overviews architecture principles, design patterns, and technologies used to build microservices. It covers the theory of the GRPC framework and protocol buffers mechanism, as well as techniques and specifics of building isolated TypeScript services in the Node.js stack. The workshop includes a live use case demo of decomposing an API application into a set of microservices. It fits the best architects, tech leads, and developers who want to learn microservices patterns. Level: AdvancedPatterns: DDD, MicroservicesTechnologies: GRPC, Protocol Buffers, Node.js, TypeScript, NestJS, Express.js, PostgreSQL, TurborepoExample structure: monorepo configuration, packages configuration, common utilities, demo servicePractical exercise: refactor monolith app

Decomposing Monolith NestJS API into GRPC Microservices

Alex Korzhikov

La autenticación sin contraseña puede parecer compleja, pero es simple agregarla a cualquier aplicación usando la herramienta adecuada. Mejoraremos una aplicación JS de pila completa (Node.JS backend + React frontend) para autenticar usuarios con OAuth (inicio de sesión social) y Contraseñas de Un Solo Uso (correo electrónico), incluyendo:- Autenticación de usuario - Gestionar interacciones de usuario, devolviendo JWTs de sesión / actualización- Gestión y validación de sesiones - Almacenar la sesión para solicitudes posteriores del cliente, validando / actualizando sesiones Al final de la masterclass, también tocaremos otro enfoque para la autenticación de código usando Descope Flows en el frontend (flujos de trabajo de arrastrar y soltar), manteniendo solo la validación de sesión en el backend. Con esto, también mostraremos lo fácil que es habilitar biometría y otros métodos de autenticación sin contraseña. Tabla de contenidos- Una introducción rápida a los conceptos básicos de autenticación- Codificación- Por qué importa la autenticación sin contraseña Requisitos previos- IDE de tu elección- Node 18 o superior

0 to Auth in an Hour Using NodeJS SDK

This Workshop focuses on adding passwordless authentication to a node application, covering basic authentication concepts and the importance of authentication for application security. It explores session management using server-side sessions and client-side tokens like JWTs. The Workshop demonstrates the implementation of various authentication methods, including one-time password and OAuth. It also discusses the validation and refreshing of session tokens, as well as the customization of authentication methods and the storage of public keys for multiple instances.

Passwordless authentication may seem complex, but it is simple to add it to any app using the right tool. We will enhance a full-stack JS application (Node.JS backend + React frontend) to authenticate users with OAuth (social login) and One Time Passwords (email), including:- User authentication - Managing user interactions, returning session / refresh JWTs- Session management and validation - Storing the session for subsequent client requests, validating / refreshing sessions At the end of the workshop, we will also touch on another approach to code authentication using frontend Descope Flows (drag-and-drop workflows), while keeping only session validation in the backend. With this, we will also show how easy it is to enable biometrics and other passwordless authentication methods. Table of contents- A quick intro to core authentication concepts- Coding- Why passwordless matters Prerequisites- IDE for your choice- Node 18 or higher

Asaf Shen

ChatGPT está revolucionando Internet. En enero de 2023, ChatGPT alcanzó más de 100 millones de usuarios, convirtiéndose en la aplicación de consumo de más rápido crecimiento hasta la fecha. No te pierdas esta charla y aprende cómo usar ChatGPT en una aplicación Node.js. Utilizaremos la API de OpenAI para interactuar con el modelo ChatGPT, obtendremos una clave de API de OpenAI y luego utilizaremos una biblioteca de cliente de API para realizar solicitudes a la API desde tu código Node.js. ¡Aprende trucos sobre cómo optimizar tu productividad con ChatGPT y diviértete con la inteligencia artificial!

Cómo usar ChatGPT con Node.js

Today's Talk introduces Chat GPT and its integration with Node.js, highlighting its exceptional performance and natural language capabilities. The speaker demonstrates how to interact with ChatGPT using Node.js and showcases examples such as selecting avatars and getting jokes. The Talk also discusses the use of ChargePT for extracting important information and interacting with databases. Important considerations when using ChatGPT, the potential of GPT-4, and the impact of AI on jobs are also covered. Security concerns and the use of extensions like Runme in Visual Code are mentioned as well.

ChatGPT is revolutionizing the internet. In January 2023, ChatGPT reached over 100 million users, making it the fastest-growing consumer application to date. Don't miss this talk and learn how to To use ChatGPT in a Node.js application, we will use: OpenAI API to interact with the ChatGPT model, we will get an API key from OpenAI, and then use an API client library to make requests to the API from your Node.js code. Learn hacks on how to optimize your productivity with ChatGPT and have fun with artificial intelligence!

How to use ChatGPT with Node.js

Lizz Parody

<div>La mayoría de las aplicaciones JavaScript utilizan JSON.parse para crear cualquier objeto primero, y luego validar y estrechar el tipo de datos al esperado. Este enfoque tiene problemas de rendimiento y seguridad, ya que incluso si los datos no son válidos, toda la cadena JSON debe ser analizada primero antes de que los datos sean validados, en lugar de fallar en la etapa de análisis JSON (por ejemplo, si se pasa un número en lugar de una cadena en alguna propiedad).</div><div> </div><div>Muchos lenguajes admiten el análisis de cadenas JSON directamente en los tipos esperados, pero no es compatible de forma nativa en JavaScript o TypeScript.</div>En esta charla mostraremos cómo se pueden utilizar las capacidades de TypeScript combinadas con la nueva especificación JSON Type Definition (RFC 8927) y la biblioteca Ajv para analizar sus datos directamente en el tipo definido por la aplicación más rápido que JSON.parse, y también cómo serializar datos de un tipo conocido aproximadamente 10 veces más rápido que JSON.serialize.

Analizar, no validar

Hello. We're going to talk today about JavaScript and how to ensure data correctness. JSON can be wasteful and has security issues, but Fastify tackles these challenges. JTD is better than JSON Schema for most API use cases, as it has a more strict structure and avoids debugging issues. Jason demonstrates how to validate data with JTD and TypeScript, ensuring data validity and improving performance. The approach of parsing JSON directly to the application type and serializing a specific type improves security and reliability.

<div>Most JavaScript applications use JSON.parse to create any object first, and then validate and narrow the data type to the expected one. This approach has performance and security problems, as even if the data is invalid, the whole JSON string needs to be parsed first before the data is validated, instead of failing at JSON parsing stage (e.g., if number is passed instead of string in some property).</div><div> </div><div>Many languages support parsing of JSON strings directly into the expected types, but it is not natively supported in JavaScript or TypeScript.</div>In this talk we will show how the powers of TypeScript combined with the new specification JSON Type Definition (RFC 8927) and Ajv library can be used to parse your data directly into the expected application-defined type faster than JSON.parse, and also how to serialize data of a known type approximately 10 times faster than JSON.serialize.

Parse, Don’t Validate

Evgeny Poberezkin

Jason Green

En este masterclass, veremos cómo adoptar Orama, un potente motor de búsqueda de texto completo escrito completamente en JavaScript, para hacer que la búsqueda esté disponible donde sea que se ejecute JavaScript. Aprenderemos cuándo, cómo y por qué sería una gran idea implementarlo en una función sin servidor, y cuándo sería mejor mantenerlo directamente en el navegador. Olvídate de las APIs, configuraciones complejas, etc.: Orama facilitará la integración de la búsqueda en proyectos de cualquier escala.

Búsqueda de texto completo basada en JavaScript con Orama en todas partes

Orama Search Workshop is a learn-as-you-type workshop that introduces Orama, an open-source full-text search engine written in TypeScript. The workshop covers topics such as ES Modules, project structure, using pnpm for monorepos, creating a new Orama schema, importing and inserting data, performing searches, and filtering search results. Orama is recommended for those needing a full-text search engine that can easily scale and run on CDNs. The workshop also discusses future plans, deploying strategies, and community support through Slack.

In this workshop, we will see how to adopt Orama, a powerful full-text search engine written entirely in JavaScript, to make search available wherever JavaScript runs. We will learn when, how, and why deploying it on a serverless function could be a great idea, and when it would be better to keep it directly on the browser. Forget APIs, complex configurations, etc: Orama will make it easy to integrate search on projects of any scale.

JavaScript-based full-text search with Orama everywhere

En 2018, se publicó un nuevo vector de ataque contra los códigos JavaScript: la Contaminación de Prototipos. A primera vista, parecía bastante limitado en su impacto: básicamente sería una buena forma de hacer que algunos códigos se bloqueen. Sin embargo, se han producido múltiples casos de Ejecuciones de Código Remoto basados en este vector. En esta charla, aclararemos qué son las contaminaciones de prototipos, su impacto real y cómo evitar que ocurran en su código.

Contaminación de Prototipos en JavaScript

This Talk discusses prototype production in JavaScript and focuses on the concept of prototype pollution. It explains the impact of prototype pollution and ways to avoid it. The Talk also highlights real-world examples of prototype pollution vulnerabilities in Kibana and MongoDB. It provides recommendations for preventing and mitigating prototype pollution, such as filtering out merge functions and using defensive objects. The Talk concludes with a discussion on tools like Semgrep for static analysis and the importance of sanitization and validation in preventing outside attacks.

In 2018, a new attack vector against JavaScript codebases has been published: Prototype Pollution. At first glance, it seemed pretty limited in impact: it would basically be a good way to crash some code. However, multiple cases of Remote Code Executions have happened based on this vector. In this talk, we will clarify what are prototype pollutions, their real impact and of to prevent them from happening in your codebase.

Prototype Pollution in JavaScript

Vladimir de Turckheim

La base de datos puede ser una de las partes más difíciles de escalar en una aplicación web. Muchos proyectos terminan utilizando sistemas de caché ad-hoc que son complejos, propensos a errores y costosos de construir. ¿Qué pasaría si pudieras implementar un sistema de caché listo para usar para mejorar el rendimiento y la optimización de consultas sin necesidad de realizar cambios en el código de tu aplicación? Únete a los desarrolladores Aspen Smith y Nick Marino para ver cómo puedes cambiar una línea de configuración en tu aplicación y utilizar ReadySet para escalar el rendimiento de tus consultas en órdenes de magnitud hoy mismo.

Escalando tu base de datos con ReadySet

ReadySet is a plug and play caching solution that improves database performance and query optimization. It supports scaling out to multiple nodes without additional load on the database and ensures real-time cache updates. ReadySet significantly speeds up queries and reduces query time, making it a game-changer for web applications. It is not designed for write-heavy applications but works best for read-heavy loads. Community feedback is encouraged, and a cloud version of ReadySet is available for production use.

The database can be one of the hardest parts of a web app to scale. Many projects end up using ad-hoc caching systems that are complex, error-prone, and expensive to build. What if you could drop in a ready-built caching system to enable better throughput and latency with no code changes to your application? Join developers Aspen Smith and Nick Marino to see how you can change one line of config in your app and use ReadySet to scale up your query performance by orders of magnitude today.

Scaling up Your Database With ReadySet

Aspen Smith

Nick Marino 

Desplegar aplicaciones desacopladas y de microservicios no es solo un problema que se resuelve el día de la migración. Avanzar con estas arquitecturas depende completamente de cómo será la experiencia del flujo de trabajo de su equipo día a día después de la migración. La parte más difícil de esto a menudo es la cantidad de proveedores involucrados. Algunos objetivos son más adecuados para frameworks frontend específicos, mientras que otros son más adecuados para CMS y APIs personalizadas. Desafortunadamente, sus suposiciones, flujos de trabajo, APIs y conceptos de seguridad pueden ser bastante diferentes. Si bien hay ciertas ventajas en confiar en un contrato estricto entre aplicaciones, donde el trabajo del equipo backend y frontend se limita a un solo proveedor, esto no siempre es realista. Esto podría ser porque aún están experimentando, o simplemente porque el tamaño de su organización aún no permite este tipo de especialización. En este masterclass, tendrás la oportunidad de explorar un enfoque diferente y de un solo proveedor para microservicios utilizando Strapi y Next.js como ejemplo. Desplegarás cada aplicación individualmente, estableciendo un flujo de trabajo desde el principio que simplifica la personalización, introduce nuevas características, investiga problemas de rendimiento e incluso permite la intercambiabilidad de frameworks desde el principio. Estructura:- Comenzando- Descripción general de Strapi- Descripción general del flujo de trabajo de Platform.sh- Desplegar el proyecto- Cambiar servicios- Agregar el frontend Requisitos previos:- <a href="https://auth.api.platform.sh/register?trial_type=general&amp;_utm_medium=node-congress&amp;_utm_campaign=2023-Node-Congress&amp;_utm_source=node-congress" target="_blank">Crear una cuenta de prueba en Platform.sh</a>- <a href="https://docs.platform.sh/administration/cli.html" target="_blank">Instalar la CLI de Platform.sh</a>

Desacoplamiento en Práctica

Platform.SH is a platform as a service provider that supports various frameworks and runtimes. In this workshop, a two application project called food adviser is deployed using Next.js as the front end and Strapi as the back end. The process involves creating a Strapi application, managing content collections, building the Strapi API, setting up the database and admin panel, deploying the project to Platform.SH, integrating with GitHub, configuring routes, and deploying the backend. The workshop also covers deploying the frontend, configuring the frontend and backend, and additional topics such as email settings in Strapi.

Deploying decoupled and microservice applications isn't just a problem to be solved on migration day. Moving forward with these architectures depends completely on what your team's workflow experience will look like day-to-day post-migration. The hardest part of this can often be the number of vendors involved. Some targets are best suited for specific frontend frameworks, while others are more so for CMSs and custom APIs. Unfortunately their assumptions, workflows, APIs, and notions of security can be quite different. While there are certain advantages to relying on a strict contract between apps – where backend and frontend teams work is limited to a single vendor – this isn't always realistic. This could be because you're still experimenting, or simply the size of your organization doesn't allow for this kind of specialization just yet. In this workshop, you'll have a chance to explore a different, single vendor approach to microservices using Strapi and Next.js as an example. You'll deploy each app individually, establishing a workflow from the start that simplifies customization, introducing new features, investigating performance issues, and even framework interchangeability from the start. Structure:- Getting started- Overview of Strapi- Overview of Platform.sh workflow- Deploying the project- Switching services- Adding the frontend Prerequisites:- <a href="https://auth.api.platform.sh/register?trial_type=general&amp;_utm_medium=node-congress&amp;_utm_campaign=2023-Node-Congress&amp;_utm_source=node-congress" target="_blank">A Platform.sh trial account created</a>- <a href="https://docs.platform.sh/administration/cli.html" target="_blank">The Platform.sh CLI installed</a>

Decoupling in Practice

Chad Carlson

En esta charla, hablaré sobre los beneficios de usar GraphQL y mostraré una pequeña demostración de un punto final creado con Fastify Mercurius y Prisma.

GraphQL con Mercurius y Prisma, amor a primera vista

The Talk discusses the use of Prisma and Mercurius in moving from REST API to GraphQL. Prisma improves the developer experience and allows for easy data modeling and type-safe queries. Mercurius is easy to learn if you already know Fastify and offers a performant GraphQL server. Fastify is preferred over Express for its active community and good performance. The ideal stack for Node.js includes Fastify for REST API and GraphQL, Prisma for the database, and the default provider like MongoDB.

In this speech, I'll talk about the benefit of using GraphQL and show a small demo of an endpoint created with Fastify Mercurius and Prisma.

GraphQL with Mercurius and Prisma, love at first sight

Luca Del Puppo

En esta charla, me encantaría informar e inspirar a la comunidad para superar las limitaciones del desarrollo web ejecutando Node.js dentro del navegador. Cubriré cómo y por qué desarrollamos WebContainers, cuáles fueron y son nuestros obstáculos y limitaciones, cómo hemos trabajado con la comunidad para mejorar la tecnología y qué se ha habilitado y construido con WebContainers.

Lleva Node.js a tu navegador con WebContainers

This Talk discusses bringing Node.js into the browser using web containers. It covers the history of Node.js and the internet in the early 2000s, the possibilities of Node.js in the browser, and approaches to achieving this. It also explores Stackbits' journey and growth, innovation in web container design, and the functionality of web containers. The Talk emphasizes the importance of open source and collaboration in improving the web ecosystem.

In this talk, I'd love to inform and inspire the community to push the limitations of web development running Node.js inside the browser. I will cover how and why we developed WebContainers, what our roadblocks and limitations were and are, how we've worked with the community to make the technology better and what has already been enabled and built with WebContainers.

Bring Node.js into your browser with WebContainers

Sylwia Vargas

Las aplicaciones web son comúnmente vulnerables a varios ataques de Denegación de Servicio Distribuido, a veces de formas inesperadas. Un ejemplo es el ataque SlowLoris, una explotación que provoca interrupción del servicio simplemente enviando los datos al servidor lo más lento posible. En esta charla contaré la historia de cómo tomó casi 13 años proteger por completo a Node del ataque SlowLoris. También mostraré que a veces, priorizar el rendimiento puede llevar a soluciones incorrectas que resultan en una falsa sensación de protección.

La historia de cómo evitar un ataque DDOS basado en el tiempo en Node.js

Web applications face constant threats from DDoS attacks, including the new Zoloris attack that can bring down a server with minimal bandwidth. Node.js has had vulnerabilities in its timeout handling, but recent versions like Node 18 provide better protection. NGINX is recommended for protection against slow loris attacks due to its superior timeout handling. Mitigating slow loris attacks for WebSockets involves enforcing higher timeouts and shutting down idle clients. It is important to prioritize security over performance and use common sense in software development.

Web applications are commonly vulnerable to several Distributed Denial of Service attacks, sometimes in unexpected ways. An example is the SlowLoris attack, an exploit that leads to service interruption by simply sending the data to the server as slowest as possible.  In this talk I will tell the tale of how it took almost 13 years for Node to be completely protected by SlowLoris attack. I will also show that sometimes prioritizing performance can lead to incorrect fixes that can result in a false sense of protection.

The tale of avoiding a time-based DDOS attack in Node.js

Paolo Insogna

Las codificaciones de caracteres pueden ser confusas para cualquier desarrollador, brindando dificultades incluso para los más experimentados, por lo que muchas veces queremos obtener algo que simplemente funcione sin una comprensión profunda de los conceptos involucrados. En esta charla, Anna dará una visión general de qué son, qué proporciona el lenguaje JavaScript para interactuar con ellas y cómo evitar los errores más comunes en Node.js y en la Web.

Codificación de caracteres en JS

Character encodings are important for converting characters into bytes. UTF-8 is the most commonly used encoding in JavaScript. JavaScript engines handle character encodings automatically. There are bugs in Node.js related to character encoding and string manipulation. It is important to be cautious when working with character encodings and to choose the appropriate method for string manipulation.

Character encodings can be confusing for every developer, providing pitfalls even for the most experienced ones, so a lot of the time we want to end up with something that “just works” without an in-depth understanding of the involved concepts. In this talk, Anna will give an overview over what they are, what the JavaScript language provides to interact with them, and how to avoid the most common mistakes in Node.js and the Web.

JS Character Encodings

Anna Henningsen

Esta charla te enseñará cómo escribir módulos de Node.js críticos para el rendimiento sin la carga de distribuir artefactos dependientes de la plataforma y usar la cadena de herramientas C/C++. Descubrirás cómo integrar sin problemas código Rust en tu aplicación Node.js + TypeScript utilizando WebAssembly. También aprenderás cómo evitar los problemas típicos de serialización de WebAssembly y entenderás cuándo otras alternativas como Neon o Napi.rs son preferibles. Juntos, cruzaremos el puente del lenguaje entre Rust y Node.js mientras preservamos la familiaridad de la experiencia de desarrollo que estás acostumbrado.

Enlaces seguros para Node.js con Rust y WebAssembly

This Talk explores TypeScript bindings for NodeJS with Rust and WebAssembly, providing an alternative approach for creating native NodeJS modules and automatically generating types. It delves into the use of WebAssembly and Rust for TypeScript modules, showcasing how Rust functions can be defined and imported using the wasm.bindgen library. The Talk also highlights the challenges of string conversion between Rust and JavaScript, the limitations of supporting Rust data types in JavaScript, and the seamless integration of Rust functions into TypeScript apps using tspy. It concludes with the recommendation of TSFI for type-safe bindings and showcases its usage in a TypeScript-based full-text search engine with WebAssembly support.

This talk will teach you how to write performance-critical Node.js modules without the burden of distributing platform-dependent artifacts and using the C/C++ toolchain. You will discover how to smoothly integrate Rust code into your Node.js + TypeScript application using WebAssembly. You will also learn how to avoid the typical WebAssembly serialization issues, and understand when other alternatives like Neon or Napi.rs are preferable. Together, we will cross the language bridge between Rust and Node.js while preserving the familiar DX you're used to.

Type-safe bindings for Node.js with Rust and WebAssembly

Alberto Schiabel

En el panorama actual de desarrollo de software rápido, es esencial contar con herramientas que nos permitan construir, probar y desplegar nuestras aplicaciones de manera rápida y eficiente. Poder enviar características rápidamente implica tener una base de código saludable y mantenible, lo cual puede ser complicado y desafiante, especialmente a largo plazo.En esta charla, exploraremos estrategias para construir backends de Node mantenibles aprovechando las herramientas que proporciona Nx. Esto incluye cómo modularizar una base de código, utilizar generadores de código para mantener la consistencia, establecer límites de código y cómo mantener la integración continua rápida a medida que crece la base de código.

Arquitectura de código de próxima generación para construir aplicaciones de Node mantenibles

Today's Talk focused on code architecture, modularization, and scaling in software development. The speaker discussed the benefits of separating code by domain and using tools like NX to improve productivity and enforce modular architecture. They also highlighted the importance of automating library creation and configuration. Additionally, the Talk covered code scaling and deployment strategies, including caching and automated code migrations. The speaker emphasized the flexibility and scalability of Fastify and the advantages of using a monorepo for front-end and back-end development.

In today's fast-paced software development landscape, it's essential to have tools that allow us to build, test, and deploy our applications quickly and efficiently. Being able to ship features fast implies having a healthy and maintainable codebase, which can be tricky and daunting, especially in the long-run.In this talk, we'll explore strategies for building maintainable Node backends by leveraging tooling that Nx provides. This includes how to modularize a codebase, using code generators for consistency, establish code boundaries, and how to keep CI fast as your codebase grows.

Next Generation Code Architecture for Building Maintainable Node Applications

Juri Strumpflohner

En esta charla, crearemos un pequeño tiempo de ejecución de JavaScript desde cero en Rust. Aprovecharemos el mismo ecosistema de componentes que utiliza Deno para mostrar que crear un tiempo de ejecución personalizado que se ajuste a tus necesidades es simple y divertido en 2023

Crea tu propio tiempo de ejecución de JavaScript

This Talk introduces Deno, a custom JavaScript runtime similar to Node.js, and discusses the benefits of using a custom runtime. It explores the process of building a custom runtime with Deno in Rust, including the integration with Cargo and the ability to mix and match crates and APIs. The Talk also covers the implementation of the setTimeout function in both Run.js and Runtime.js, and provides examples of how to fix errors and implement additional functions. Overall, the Talk highlights the flexibility and possibilities of creating custom runtimes with Deno.

In this talk, we’ll create a small JavaScript runtime from scratch in Rust. We’ll leverage the same ecosystem of components that Deno uses to show that rolling a bespoke runtime fitting your needs is simple and fun in 2023

Roll you own JavaScript runtime

Bartek Iwanczuk

Esta charla trata sobre SecureEcmaScript y Compartments, que son propuestas de TC39, y estoy trabajando en herramientas para hacer que estos conceptos sean utilizables con las personas que defienden esas propuestas. Esta es una cuenta de primera mano sobre el futuro de la seguridad de JavaScript. SES + herramientas (LavaMoat o Endo) están haciendo posible limitar el acceso a la red, fs, módulos principales o globales por paquete. Quiero mostrar cómo funcionan, qué posibilidades abren y cómo hacer que ese futuro suceda hoy con un poco de esfuerzo. Para mí, este es el paso final para asegurar la cadena de suministro de npm: incluso si un paquete es tomado por actores maliciosos, no podrá hacerme daño.

Evaluar todas las cadenas! - JavaScript endurecido

NPM packages can be potentially dangerous, so it's important to be proactive in managing them. Lava Mode allows you to detect and investigate suspicious packages before deploying your app. Lavamote prevents unauthorized access to sensitive resources by isolating dependencies and using hardened JavaScript. Lava Mode makes it easier to analyze obfuscated files and understand their actions.

This talk is about SecureEcmaScript and Compartments which are TC39 proposals, and I'm working on tooling to make these concepts usable with people championing those proposals. This is a first-hand account of the future of JavaScript security. SES + tooling (LavaMoat or Endo) is making limiting access to network, fs, core modules or globals possible on a per-package basis. I want to show how they work, what possibilities they open and how to make that future happen today with some effort. To me this is the final step in securing npm supply chain - even if a package gets taken over by bad actors, it won't be able to hurt me.

Node Congress 2023

Master Fullstack: JS Backends, DevOps, Architecture

Lera

Sophie Kolbe

Neha Seth

Marco Ippolito

Shivay Lamba

Lera

Claudio Wunder

Batuhan NARCI

David Barry

Nick Taylor

Ricardo Machado

Tally Barak

John Nguyen

Jeroen van Wissen

Robert

João Portela

Charles

Ian Sutherland

Creatopy Tech

Dariusz

Aman Beg

Alex Hayton

Ö. BURAK KARATAŞ

Jan Pfeiffer

Vitor Barbosa

Gergana Rangelova

Rishi Narang

Alex Perez

Lia Moreira

Varun

Va Da

Total attendees