GuideTechnology
16 min read
The security decisions that shape an architecture: trust boundaries and least privilege, authentication with passwords, MFA and identity providers, sessions versus tokens and JWTs, object-level authorisation, service-to-service identity, encryption in transit and at rest, secrets management, input validation and abuse prevention, SSRF, data privacy, audit logs and payment data.
GuideTechnology
17 min read
When should a caller wait for an answer, and when should work happen later? Learn the costs and benefits of synchronous calls and asynchronous processing, the patterns for returning results later (202 and status polling, webhooks, push), and how to choose between short polling, long polling, Server-Sent Events, WebSockets and mobile push.
GuideTechnology
19 min read
Design APIs that clients can rely on: resources and URLs, HTTP methods and which are safe to retry, status codes, validation, error formats, cursor pagination, filtering, idempotency keys, rate-limit responses, versioning, and when gRPC or GraphQL fit better than REST.
