Question 1

Explain the concept of 'middleware' in Express.js.

Accepted Answer

**Target Audience:** Engineers preparing for Node.js/Express interviews — assumes no prior Express-specific knowledge. **Difficulty:** Easy > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. The chain-ordering and short-circuiting behavior below was **actually run** against a real Express server — genuine console output, not a description of intended behavior. ## 1. Why This Even Matters — A Story First An airport secu

Question 2

What does NODE_ENV=production actually change and why does it matter?

Accepted Answer

**Target Audience:** Engineers preparing for Node.js deployment and configuration interviews. **Difficulty:** Easy > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. Both the "Node core does nothing special" proof and the real Express behavior difference below were **actually run** — not descriptions of documented behavior. ## 1. Why This Even Matters — A Story First A single word written on a sticky note ("PRODUCTION"

Question 3

How can you securely store and verify passwords in a Node.js application?

Accepted Answer

**Target Audience:** Engineers preparing for Node.js security-focused phone screens — assumes very basic hashing familiarity. **Difficulty:** Easy > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. The hash/verify pair below was **actually run** on Node v24.19.0, using only Node's built-in `crypto` module — no external package installed. ## 1. Why This Even Matters — A Story First A safe-deposit box's combination is ne

Question 4

How do you handle errors in Node.js applications?

Accepted Answer

**Target Audience:** Engineers preparing for Node.js interviews — assumes basic Express and Promise familiarity. **Difficulty:** Medium > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. The Express behavior below was **actually executed** against a real Express 4.22.2 server, including a real crash, not described from documentation. ## 1. Why This Even Matters — A Story First A building's fire-alarm system automatical

Question 5

How do you implement structured logging with pino or winston, and why avoid console.log in production?

Accepted Answer

**Target Audience:** Engineers preparing for Node.js observability and production-logging interviews. **Difficulty:** Medium > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. Both the real structured output and the real level-filtering below were **actually run** with the real `pino` library — genuine, parseable JSON, and a genuine, confirmed suppression, not descriptions of documented behavior. ## 1. Why This Even Mat

Question 6

How do you handle uncaught exceptions and unhandled promise rejections in Node.js?

Accepted Answer

**Target Audience:** Engineers preparing for Node.js interviews — assumes basic Promise/async familiarity. **Difficulty:** Medium > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. Both the handled and the genuinely unhandled (crashing) cases below were **actually executed** on Node v24.19.0 — a real exit code, not an assumption. ## 1. Why This Even Matters — A Story First A building has two entirely separate emergency

Question 7

What is the difference between JWT and session-based authentication, and where do refresh tokens fit?

Accepted Answer

**Target Audience:** Engineers preparing for Node.js authentication and API-security interviews — assumes familiarity with this bank's dedicated session-vs-JWT fundamentals question. **Difficulty:** Hard > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. The real refresh flow, replay attempt, and family revocation below were **actually run** with Node's built-in `crypto` module — genuine HMAC signing, a genuine expiry fa

Question 8

How can you debug a Node.js application?

Accepted Answer

**Target Audience:** Engineers preparing for Node.js interviews — no prior debugging-tooling experience assumed. **Difficulty:** Medium > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. The console output below was **actually produced** by running the code on Node v24.19.0 — a real call stack, not a hypothetical one. ## 1. Why This Even Matters — A Story First A mechanic diagnosing a car noise has more tools than "lis

Question 9

What is AsyncLocalStorage and what problem does it solve?

Accepted Answer

**Target Audience:** Engineers preparing for Node.js async-architecture interviews — assumes familiarity with the event-loop and Promise-fundamentals questions in this bank. **Difficulty:** Hard > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. The concurrent, interleaved context isolation below was **actually run** — two real requests genuinely overlapping in time, each retaining the correct context, not a description

Question 10

How do you add OpenTelemetry distributed tracing to a Node.js service?

Accepted Answer

**Target Audience:** Engineers preparing for Node.js observability and distributed-systems interviews — assumes familiarity with the structured-logging question's real, complementary proof. **Difficulty:** Hard > **How to read this doc:** Concepts are explained in plain language first, then tagged with 📌 Interview term:. The real, correlated spans below were **actually created and exported** — a genuine shared trace ID, a genuine, confirmed parent-child relationship, and real, mea

NODE.JSDECODED.

Easy