Back End
Collections
- Solving the double (quintuple) declaration Problem in GraphQL Applications: How to not repeat yourself!
- Why we ditched GraphQL for tRPC
- API Lifecycle Management
- Conditional API Responses For JavaScript vs. HTML Forms
- Dealing with cold starts
- An Internet of PHP
- System Design Interview Question: Design URL Shortener
- I Reviewed 1,000s of GraphQL vs. REST perspectives
- Access control
- Rate limiting
- Caching
- DOS protection
- Using Maps/Tables/Dictionaries
- N + 1 Problem
- Your API Shouldn't Redirect HTTP to HTTPS
- Redirection can lead to sensitive data being transmitted in plaintext before the encrypted connection is established.
- gRPC: The Bad Parts
Auth
The complete guide to protecting your APIs with OAuth2
- https://news.ycombinator.com/item?id=31004928
- https://datatracker.ietf.org/doc/html/draft-ietf-oauth-v2-1-05
- https://fusionauth.io/blog/2020/04/15/whats-new-in-oauth-2-1
Why I Love Basic Auth
Stop Using JSON Web Tokens For Authentication. Use Stateful Sessions Instead.
Tutorial
Children
- API Bites — Payload Conventions
- Ask HN: Easiest way to build a CRUD app?
- Ask HN: What would be your stack if you are building an MVP today?
- Everything You Need to Know About HTTP Response Status Codes
- My favourite API is a zipfile on the European Central Bank's website
- REST, GraphQL or RPC — A Decision Paralysis
- Richardson Maturity Model
- Tools
- When to use gRPC vs GraphQL
- Why, after 6 years, I’m over GraphQL
- Writing API Design Standards