A rigorous, project-driven curriculum for building the invisible layer that powers every app, website, and platform you've ever used. By Week 6, you will have built and deployed real APIs, connected live databases, secured your endpoints with authentication, and shipped a full backend project you own.
Highlights
.js scriptProject 1 — The HTTP Explorer
Use Postman to make 10 real HTTP requests to five different public APIs — a weather API, a currency exchange API, a public government dataset, a sports data API, and one of your choice. For each request, document: the method used, the status code returned, what triggered it, and what the response body contains. Write a short explanation of the difference between GET and POST, and why a server returns 401 vs. 403. Delivered as a documented Postman collection and a written summary.
Project 2 — Personal Notes API
Build your first REST API from scratch: a notes application with full CRUD operations stored in memory. Five routes — list all notes, get one note by ID, create a note, update a note, delete a note. All routes tested and documented in Postman. This API will be upgraded with a real database in Week 3.
Project 3 — Notes API with PostgreSQL
Upgrade your Week 2 Notes API: replace in-memory storage with a real PostgreSQL database. Same five routes, same behavior — but now data survives a server restart. Includes a schema diagram, parameterized queries throughout, and the database hosted on Railway or Supabase. Delivered as an updated GitHub repository with setup instructions in the README.
Project 4 — Blog API
Design and build a multi-resource REST API for a blog platform: users and posts with a one-to-many relationship. Full CRUD for both resources, input validation on every POST and PUT route, centralized error handling, environment variables for all secrets, and a fully documented Postman collection. This is the API that gets secured in Week 5.
Project 5 — Auth-Protected Blog API
Add full authentication to your Week 4 Blog API. Users register and log in. Posts are protected — only authenticated users can create, update, or delete. Users can only modify their own posts. Passwords stored as bcrypt hashes, tokens expire after a set window, rate limiting on the login route, and CORS configured correctly. Delivered as an updated, fully secured GitHub repository.
Define a real problem and build a complete, deployed backend API to solve it. A marketplace, an event booking service, a school management system, a community platform — anything that demonstrates multiple resources, real authentication, a live database, and production deployment.
A live API URL is required to complete the course.
Required:
| Week | Project | Output |
|---|---|---|
| Week 1 | The HTTP Explorer | Postman Collection · Written Summary |
| Week 2 | Personal Notes API | REST API · In-Memory · GitHub |
| Week 3 | Notes API with PostgreSQL | Database-Backed API · Live Database |
| Week 4 | Blog API | Multi-Resource API · Postman Docs |
| Week 5 | Auth-Protected Blog API | Secured API · JWT Authentication |
| Week 6 | Capstone Backend API | Live Deployed API · Full Documentation |
You finish the course with a live, documented API portfolio, a GitHub profile showing real backend code at every stage, and the ability to build and deploy server-side applications independently.
The Notes API gains a database in Week 3. The Blog API gains authentication in Week 5. The authenticated API gets deployed in Week 6. Students watch one real system grow instead of starting from scratch each week — which is exactly how backend development works in practice.
bcrypt, parameterized queries, environment variables, input validation, and rate limiting are introduced progressively from Week 3 onward. By the time students reach the capstone, security is a habit not a checklist.
Week 3 upgrades the existing API from memory to PostgreSQL using the same routes and same behavior. Students see exactly what changes and why — making the database layer concrete instead of abstract.
The capstone requires a live production URL on Railway or Render. Students graduate having completed the full pipeline from writing a route to running it in production — the part most backend tutorials leave out.
Methods inspired by Harvard CS50W and MIT 6.031 Software Construction