APIs & Security
REST, GraphQL, gRPC compared — plus authentication methods, API design, and secure inter-service communication.
Courses
Master how microservices talk to each other — synchronous REST and gRPC, async messaging, event-driven patterns, resilience, and distributed consistency.
Articles
Many companies already run an LLM gateway, such as LiteLLM, a cloud API gateway, or an in-house proxy, between their developers and the mode…
A security review of Claude Code has to answer two kinds of question. What happens to our data once it leaves the laptop: is it used for tra…
A travel checkout may call a public weather API, your own booking API, and a partner airline API. All three could use REST, but they should …
HTTPS and a valid JWT only prove the front door locked. Many real API incidents happen after authentication succeeds: a user changes /orders…
Many .NET teams stop at "add [Authorize] and check roles." That covers two of seven authorization models ASP.NET Core ships with — and leave…
A well-designed REST API is a contract. Clients depend on its URLs, error shape, and pagination for years; an accidental breaking change can…
A partner script scrapes your API with a leaked key. A mobile build ships a password in every header. A "Sign in with GitHub" button works u…
A developer opens the console, sees a red "blocked by CORS policy" error on a fetch call, and assumes the request never reached the server. …
A mobile app adds "Sign in with Provider," gets back a token, and calls it a login. OAuth 2.0 was never built to answer "who is this user" —…
Want a guided sequence? Follow a learning path that includes this topic.
View Learning Paths