5 min read
Web app authentication: sessions, JWT or OAuth
How sessions, JWTs and OAuth differ, when to choose each, how to store tokens safely and which authentication mistakes are most common.
- Security
- API
(Tag)
API
API design: REST, GraphQL, webhooks, authentication and contracts between front end, backend and partners.
- All articles
- MVP 5
- Laravel 3
- Node.js 2
- Project estimation 7
- Nuxt 1
- SEO 5
- Working with vendors 6
- Team 5
- Architecture 7
- Backend 11
- Development process 13
- Product 7
- Security 6
- Frontend 7
- Vue 1
- React 3
- Databases 4
- AI 7
- API 4
- News 2
- Mobile 4
- Startups 3
- Performance 6
- Python 2
- Support 3
- Analytics 3
- SaaS 2
- FinTech 3
- E-commerce 2
- QA and testing 3
- DevOps 4
- Automation 2
- EdTech 2
- Technical debt 1
5 min read
Idempotent payments and webhooks: how not to charge customers twice
Double charges come from repeated requests and webhooks. We cover idempotency keys, webhook handling, unique indexes and tests for your payment flow.
- API
- FinTech
- E-commerce
5 min read
REST, GraphQL or gRPC: which API style to choose
REST is the default, GraphQL suits many clients on a complex data model, gRPC suits service-to-service calls. We compare the three and how to combine them.
- Architecture
- API
5 min read
How to design a REST API that is easy to use
REST API rules for web and mobile clients: resource naming, methods and status codes, one error format, pagination and changes that do not break clients.
- Backend
- API