Full-Stack Web Development Track
A masterclass curriculum built on first-principles computing: modern frontend UI architectures (HTML5, Tailwind, React 18/19), distributed backend engines (Node.js, Express, TypeScript), relational and document persistence (PostgreSQL, MongoDB, Prisma ORM), Zero-Trust security (Bcrypt, JWT, OAuth 2.0 PKCE, OWASP), real-time WebSockets, and production test engineering.
Introduction to Full Stack Development
Three-tier architecture, client-server models, TCP/TLS handshake mechanics, 10-stage request-response lifecycle, browser rendering engines vs web servers, and comparative technology stacks.
Frontend Development (HTML, CSS, JS)
Semantic HTML5, WCAG accessibility, responsive CSS design systems (Box Model, Flexbox, Grid, Tailwind CSS), and modern asynchronous JavaScript (DOM mutations, Event Loop, Promises, Web Storage).
Frontend Framework: React.js Architecture
Virtual DOM Fiber reconciliation, JSX compilation, unidirectional data flow (Props vs State), core Hooks mechanics, React Router v6 navigation with protected routes, and Redux Toolkit state architecture.
UI/UX Design & Responsive Systems
Cognitive UX ergonomics (Norman principles, Fitts's Law, Hick's Law), wireframing workflows, design token systems (MUI vs Chakra UI), fluid typography, system-aware dark mode theming, and the four component states.
Version Control & Team Collaboration
Git internal Directed Acyclic Graph (DAG) object store (Blobs, Trees, Commits), Three Trees state lifecycle, 3-Way ORT merges vs rebase, conflict markers, GitHub PR reviews, Trunk-Based vs Git Flow, and CI actions.
Backend Development (Node.js & Express)
V8 engine and libuv non-blocking I/O core, the 6-phase Event Loop and microtask queues, native streaming HTTP servers, Express middleware pipelines, Zod schema validation, Multer file uploads, and Winston logging.
REST APIs and Web Services
Roy Fielding's REST constraints, HTTP method semantics, Keyset vs Offset pagination, RFC 7807 problem details, OpenAPI 3.1 contracts, Postman/Newman CI pipelines, React Axios interceptors, and HMAC-SHA256 Webhooks.
Databases (Relational SQL & NoSQL)
PostgreSQL vs MySQL InnoDB, B-Tree index traversal, ACID transaction isolation (MVCC vs 2PL), normalization (1NF through BCNF), Prisma ORM interactive transactions, MongoDB WiredTiger, and Mongoose aggregation pipelines.
Authentication & Authorization (Zero-Trust)
Bcrypt adaptive work factor hashing, stateful Redis sessions vs stateless JWTs, HttpOnly cookie security, dual-token refresh rotation with reuse detection, OAuth 2.0 PKCE, RBAC route guards, and TOTP MFA (RFC 6238).
Backend Security & OWASP Hardening
OWASP Top 10 vulnerabilities, parameterized SQL query AST compilation, XSS/CSRF mitigation, CORS preflight handshakes, Helmet security response headers, sliding-window rate limiting, magic-byte upload validation, and TLS 1.3 handshakes.
Full Stack Integration & Real-Time Sync
Client-server reverse proxies, Client vs Server state (Zustand vs TanStack Query), silent token refresh queue patterns, multipart upload progress telemetry, URL search parameter synchronization, and Socket.IO real-time notification rooms.
Testing & Debugging (Quality Engineering)
Testing Pyramid, Chrome DevTools memory heap snapshots, Node.js V8 inspector, React Testing Library accessible query hierarchy, Supertest in-memory Express sockets, MSW network mocking, TDD Red-Green-Refactor, and branch code coverage.