API Response Shaping, Done Properly
Deciding what data an API returns, how it is structured and how clients request more or less of it. Key takeaways Resources: transform internal models into stab...
Lumexa Media · Writing
Websites and web products that load fast, read clearly and hold up under maintenance.
771 articles in Web Design & Development · every discipline
Deciding what data an API returns, how it is structured and how clients request more or less of it. Key takeaways Resources: transform internal models into stab...
Returning large collections in pages, using offsets, cursors or keyset pagination. Key takeaways Offset pagination: is simple but slows on large offsets Cursor...
Designing requests so that repeating them has the same effect as sending them once, usually with an idempotency key. Key takeaways Idempotency keys: let servers...
Letting people sign in to an application with their existing work identity, usually through SAML or OpenID Connect. Key takeaways Protocols: SAML and OpenID Con...
A standard for automatically creating, updating and disabling user accounts from a customer's identity system. Key takeaways Standard: SCIM defines a proto...
Recording who did what and when in an application, separately from technical error logs. Key takeaways Contents: actor, action, target, time and source Immutabi...
Deciding how long different types of data are kept and building deletion into the system. Key takeaways Retention schedules: different data types have different...
Letting users download their own data in a usable format. Key takeaways Formats: machine-readable formats such as JSON or CSV are expected Scope: exports should...
Protecting data at rest and in transit with encryption, and managing the keys that make it work. Key takeaways In transit: TLS protects data moving between syst...
Configuring HTTPS properly, including protocol versions, cipher choices and strict transport security. Key takeaways HSTS: tells browsers to use HTTPS for a dom...
Protecting a site against attacks that overwhelm it with traffic. Key takeaways Volumetric attacks: flood bandwidth or connections Application attacks: target e...
A filtering layer that inspects HTTP traffic and blocks requests matching known attack patterns. Key takeaways Rule sets: managed rules cover common attack clas...
Showing 708 of 771
Send us something real and we will do it to your brief — no card, no commitment. If the standard is not what you need, you have lost nothing.