Tag
31 articles tagged #API.
P.01A side-by-side look at what OpenAI, Google, and xAI actually charge per million tokens right now, including the tiers within each model family, so you can price out a real workload before you pick a provider.
P.02A webhook is a promise your server makes to accept a request it can't control the timing, order, or retry count of. Here's how to verify signatures correctly, handle retries without duplicating side effects, and design a receiver that survives real-world delivery chaos.
P.03OpenAI's new full-duplex voice model now powers ChatGPT Voice, but it's not available through the API yet. Here's what GPT-Live-1 actually changed, and what to build with right now instead.
P.04OAuth 2.1 is still an IETF draft, not a finished RFC, but most providers already enforce it. Here's what actually changed from OAuth 2.0 and a real checklist for auditing your implementation.
P.05'No Access-Control-Allow-Origin header is present' is the most Googled error in web development for a reason. Here's what CORS actually is, why the browser (not your server) enforces it, and how to configure it correctly instead of pasting wildcard headers everywhere.
P.06DeepSeek retired the deepseek-chat and deepseek-reasoner model names on July 24, 2026, and introduced peak-hour pricing. If your integration broke yesterday, here's the actual fix, not just the model name swap.
P.07AI agents that shop or call paid APIs on your behalf need a way to pay without your credit card sitting in a prompt. Google's AP2 and Coinbase's x402 are the two standards doing that. Here's what each one actually does, in plain terms.
P.08OpenAI shipped gpt-realtime-2.1 and a mini variant with 25% lower latency and reasoning-and-tool-use support at the low end. Here's what changed, what it costs, and when to pick the mini model over the flagship.
P.09Webhooks push data to you the moment something happens; polling has you ask repeatedly whether anything changed. Here's how to decide which fits your integration, plus real code for both and the hybrid pattern most production systems actually need.
P.10A single GraphQL schema works until multiple teams own different parts of your data. Here's what federation actually solves, how Apollo Federation composes subgraphs, and when the added complexity is worth it.
P.11Google's Gemini 3.1 Flash-Lite Image generates images in about 4 seconds at $0.034 per 1,000 images. Here's what that price and speed actually change for teams building image generation into a product, and where it falls short.
P.12Idempotency keys let a client safely retry a request that might have already succeeded, without double-charging a card or double-creating an order. Here's how the pattern works, with a real implementation against Postgres and Redis.
P.13OpenAI's GPT-5.6 preview splits into three tiers instead of one model: Sol for frontier work, Terra at half the cost of GPT-5.5, and Luna for high-volume calls. Here's what changed, what it costs, and which tier actually fits your workload.
P.14A command injection flaw in LiteLLM's MCP test endpoints, chained with a Starlette host-header bypass, lets an unauthenticated attacker run arbitrary commands on your AI gateway and steal every provider key behind it. Here's what's affected and how to patch.
P.15FastAPI merged a significant router internals refactor on June 14, 2026, followed by app.frontend() for serving SPAs a week later. Routes are now preserved instead of cloned, dynamic route registration works, and serving a React or Vue frontend from FastAPI no longer requires a workaround.
P.16While the JavaScript ecosystem chased Bun, Deno, and edge runtimes, Fastify quietly became the production choice for high-throughput Node.js APIs. Here's why it's still the right call for many teams.
P.17Pydantic v2 shipped with a Rust-based core that made validation 5-50x faster. But the performance is only part of it — the v2 model redesign changes how you structure validation logic for complex APIs.
P.18The OWASP API Security Top 10 lists the most critical API vulnerabilities. Most are fixable with straightforward code changes. This guide walks through each one with real examples.
P.19ElysiaJS gives Bun apps fast routing, request validation, and full type inference between server and client — without code generation. Here's how it works and when to use it.
P.20Bruno keeps API collections as plain files in your repository. No account, no cloud sync, no vendor lock-in. Here's how it compares to Postman and why teams are switching.
P.21Go has real strengths for backend API work, and some persistent limitations. Here's what teams actually gain and give up when they choose it over Node.js or Python for web APIs.
P.22A practical guide to building SaaS billing with Stripe in 2026 — covering subscription plans, the Meter API for usage-based pricing, webhook reliability, and the Customer Portal.
P.23Stripe's API surface has grown well beyond checkout forms. Here's the realistic breakdown of which Stripe products matter for agency work, which are overkill, and where teams consistently get burned.
P.24The implicit flow is dead, and most tutorials still teach it. Here is how authorization code flow with PKCE actually works, how tokens should be stored, and where most SPA auth implementations go wrong.
P.25gRPC has been available for years but many teams default to REST without thinking through the tradeoffs. Here's how gRPC works, where it fits, and where it doesn't.
P.26k6 is a developer-friendly load testing tool with JavaScript scripting, CI integration, and clear metrics. Here's how to write meaningful load tests, interpret the results, and catch performance regressions before they reach production.
P.27Breaking API changes are inevitable. How you handle versioning determines whether clients trust your platform or avoid integrating with it. Here's a practical comparison of URL versioning, header versioning, and content negotiation.
P.28Every public API needs rate limiting, but the algorithm you choose shapes the user experience and the failure modes. Here's how each approach works and when to use it.
P.29AI features ship fast. Then the monthly API bill arrives. Here's a systematic approach to understanding and reducing LLM costs without breaking the product.
P.30EditorPickMost DRF vs FastAPI comparisons are written by people who only use one. We ship both in production. Here is what actually matters and when to choose each.
P.31The API landscape has matured beyond the GraphQL vs REST debate. Here's how to choose between REST, GraphQL, tRPC, and gRPC based on your actual requirements.