Tag
30 articles tagged #API.
P.01OpenAI's new full-duplex voice model now powers ChatGPT Voice, but it's not available through the API yet. Here's what GPT-Live-1 actually changed, and what to build with right now instead.
P.02OAuth 2.1 is still an IETF draft, not a finished RFC, but most providers already enforce it. Here's what actually changed from OAuth 2.0 and a real checklist for auditing your implementation.
P.03'No Access-Control-Allow-Origin header is present' is the most Googled error in web development for a reason. Here's what CORS actually is, why the browser (not your server) enforces it, and how to configure it correctly instead of pasting wildcard headers everywhere.
P.04DeepSeek retired the deepseek-chat and deepseek-reasoner model names on July 24, 2026, and introduced peak-hour pricing. If your integration broke yesterday, here's the actual fix, not just the model name swap.
P.05AI agents that shop or call paid APIs on your behalf need a way to pay without your credit card sitting in a prompt. Google's AP2 and Coinbase's x402 are the two standards doing that. Here's what each one actually does, in plain terms.
P.06OpenAI shipped gpt-realtime-2.1 and a mini variant with 25% lower latency and reasoning-and-tool-use support at the low end. Here's what changed, what it costs, and when to pick the mini model over the flagship.
P.07Webhooks push data to you the moment something happens; polling has you ask repeatedly whether anything changed. Here's how to decide which fits your integration, plus real code for both and the hybrid pattern most production systems actually need.
P.08A single GraphQL schema works until multiple teams own different parts of your data. Here's what federation actually solves, how Apollo Federation composes subgraphs, and when the added complexity is worth it.
P.09Google's Gemini 3.1 Flash-Lite Image generates images in about 4 seconds at $0.034 per 1,000 images. Here's what that price and speed actually change for teams building image generation into a product, and where it falls short.
P.10Idempotency keys let a client safely retry a request that might have already succeeded, without double-charging a card or double-creating an order. Here's how the pattern works, with a real implementation against Postgres and Redis.
P.11OpenAI's GPT-5.6 preview splits into three tiers instead of one model: Sol for frontier work, Terra at half the cost of GPT-5.5, and Luna for high-volume calls. Here's what changed, what it costs, and which tier actually fits your workload.
P.12A command injection flaw in LiteLLM's MCP test endpoints, chained with a Starlette host-header bypass, lets an unauthenticated attacker run arbitrary commands on your AI gateway and steal every provider key behind it. Here's what's affected and how to patch.
P.13FastAPI merged a significant router internals refactor on June 14, 2026, followed by app.frontend() for serving SPAs a week later. Routes are now preserved instead of cloned, dynamic route registration works, and serving a React or Vue frontend from FastAPI no longer requires a workaround.
P.14While the JavaScript ecosystem chased Bun, Deno, and edge runtimes, Fastify quietly became the production choice for high-throughput Node.js APIs. Here's why it's still the right call for many teams.
P.15Pydantic v2 shipped with a Rust-based core that made validation 5-50x faster. But the performance is only part of it — the v2 model redesign changes how you structure validation logic for complex APIs.
P.16The OWASP API Security Top 10 lists the most critical API vulnerabilities. Most are fixable with straightforward code changes. This guide walks through each one with real examples.
P.17ElysiaJS gives Bun apps fast routing, request validation, and full type inference between server and client — without code generation. Here's how it works and when to use it.
P.18Bruno keeps API collections as plain files in your repository. No account, no cloud sync, no vendor lock-in. Here's how it compares to Postman and why teams are switching.
P.19Go has real strengths for backend API work, and some persistent limitations. Here's what teams actually gain and give up when they choose it over Node.js or Python for web APIs.
P.20A practical guide to building SaaS billing with Stripe in 2026 — covering subscription plans, the Meter API for usage-based pricing, webhook reliability, and the Customer Portal.
P.21Stripe's API surface has grown well beyond checkout forms. Here's the realistic breakdown of which Stripe products matter for agency work, which are overkill, and where teams consistently get burned.
P.22The implicit flow is dead, and most tutorials still teach it. Here is how authorization code flow with PKCE actually works, how tokens should be stored, and where most SPA auth implementations go wrong.
P.23gRPC has been available for years but many teams default to REST without thinking through the tradeoffs. Here's how gRPC works, where it fits, and where it doesn't.
P.24k6 is a developer-friendly load testing tool with JavaScript scripting, CI integration, and clear metrics. Here's how to write meaningful load tests, interpret the results, and catch performance regressions before they reach production.
P.25Breaking API changes are inevitable. How you handle versioning determines whether clients trust your platform or avoid integrating with it. Here's a practical comparison of URL versioning, header versioning, and content negotiation.
P.26Every public API needs rate limiting, but the algorithm you choose shapes the user experience and the failure modes. Here's how each approach works and when to use it.
P.27AI features ship fast. Then the monthly API bill arrives. Here's a systematic approach to understanding and reducing LLM costs without breaking the product.
P.28EditorPickMost DRF vs FastAPI comparisons are written by people who only use one. We ship both in production. Here is what actually matters and when to choose each.
P.29The API landscape has matured beyond the GraphQL vs REST debate. Here's how to choose between REST, GraphQL, tRPC, and gRPC based on your actual requirements.
P.30EditorPickFrom internal experiment to Linux Foundation governance in 14 months. Model Context Protocol now has 97M+ monthly SDK downloads, support from every major AI company, and the first official extensions shipping. Here's the full MCP story.