Tag: api Basic
This content is a draft and will not be included in production builds.
12 articles tagged api:
- API errors with RFC 9457: status, type and detail must not swap roles
- BOLA/IDOR: logged in, yet able to read someone else's order
- Common API mistakes: injection, authorization, secrets, retries
- HTTP caching: who may store a response, and for how long?
- Idempotency-Key: retrying POST /orders without creating a second order
- Matching: pick the Cache-Control for each response
- Matching: pick the HTTP status code for each API case
- Optimistic or pessimistic locking: choose by conflict rate and think time
- Pagination in PostgreSQL: OFFSET and keyset
- Rate limiting for APIs: picking an algorithm, where to keep state and how to reject
- Timeout budget: how much time does a request have to finish?
- Webhooks: verifying signatures, handling retries and preventing duplicate processing