Tag: #api
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 16 posts
Authentication, Authorization, and IDOR — Why the Login Is Fine but You Can See Data That Belongs to Someone Else
Most real data breaches come from authorization, not authentication. The classic case is IDOR, where the login passes normally but changing only the ID in the URL returns another user resource verbatim. This post separat
2026-07-26 · 15 min read #security#authorization#idor#api#multi-tenantCORS Errors and Why You Fix the Server — How the Browser Policy Actually Works, and the Wrong Ways Around It
CORS is not a security device that protects your server. It is a policy that decides whether the browser will hand a response to a script. That is why curl succeeds while only the browser is blocked, and why the place to
2026-07-26 · 14 min read #web#cors#http#browser-security#apiHow to Actually Cut Your LLM API Bill — Why "90% Off From Caching" Is 25% on the Invoice
A prompt cache read costs one-tenth of the input price. But that does not take 90% off your invoice. Follow the worked example Anthropic publishes in its own docs and, even with the cache fully warm, the total drops only
2026-07-17 · 22 min read #llm#cost-optimization#prompt-caching#api#aiHow to Use OpenRouter — 300+ LLMs Through One API
How to call 300+ models from 60+ providers through a single OpenAI-compatible endpoint with OpenRouter — from getting a key and your first curl request to SDK drop-in, routing, fallbacks, and streaming.
2026-07-06 · 8 min read #openrouter#llm#ai-gateway#api#openai-compatibleRate Limiting Algorithms, Explained: Fixed Window, Sliding Window, Token Bucket, and Leaky Bucket
A side-by-side tour of the main rate limiting algorithms — fixed window, sliding window log and counter, token bucket, and leaky bucket. How each handles bursts, how to implement rate limiting across a distributed fleet
2026-06-25 · 11 min read #systems#api#reliabilityIdempotency and Retries: Building Reliable APIs
The network will eventually fail, and when it does you have to retry. The hard case is the request that was "already processed but whose response got lost." This post covers what idempotency is, safe versus unsafe HTTP m
2026-06-21 · 12 min read #api#reliability#distributed-systemsOpen Banking and MyData API Architecture — The Technology of Financial Data Openness
The API architecture of Korean open banking shared network and MyData (personal credit information management). We cover standard API specs and auth tokens, comparison with UK Open Banking and the FAPI security profile,
2026-06-13 · 16 min read #finance#open-banking#mydata#api#oauth2API Design Complete Guide — REST, OpenAPI, Versioning, Pagination, Idempotency, Webhooks (2025)
REST Maturity, OpenAPI 3.1, Versioning, Pagination (Offset/Cursor/Keyset), Idempotency Key, Rate Limiting, Webhook retries, AsyncAPI — the 2025 state of API design.
2026-04-15 · 10 min read #api#rest#openapi#webhook#versioningAPI Versioning & Evolution Strategy Complete Guide 2025: Breaking-Change-Free API Evolution, Deprecation, Sunset
Everything about API versioning! URL/Header/Content negotiation strategies, breaking vs additive changes, Semantic Versioning, deprecation policy, Sunset header, GraphQL versionless approach, case studies of Stripe/GitHu
2026-04-15 · 12 min read #api#versioning#evolution#breaking-changes#deprecationThe Complete Guide to API Design & Microservices Architecture
From REST, GraphQL, and gRPC API design principles to microservices patterns, service mesh, event-driven architecture, and distributed transactions.
2026-04-12 · 16 min read #architecture#api#microservices#rest#grpcLiteLLM Complete Guide 2025: Unify 100+ LLMs with a Single API Proxy Server
Everything about LiteLLM! 100+ LLM unified API, OpenAI-compatible proxy server, cost tracking/budget management, load balancing/fallback, model routing, virtual keys, rate limiting, Guardrails, production deployment (Doc
2026-03-25 · 18 min read #litellm#llm#api#proxy#openaigRPC & Protocol Buffers Complete Guide 2025: The New Standard for Microservices Communication
Everything about gRPC! Protocol Buffers schema design, 4 communication patterns (Unary/Server/Client/Bidirectional Streaming), interceptors, error handling, load balancing, gRPC-Web, REST vs gRPC comparison, and real-wor
2026-03-24 · 20 min read #grpc#protobuf#protocol-buffers#microservices#apiGraphQL Complete Guide 2025: Beyond REST — From Schema Design to Federation and Performance Optimization
Everything about GraphQL! REST vs GraphQL comparison, Schema Design (SDL), Resolver patterns, N+1 problem solving with DataLoader, microservice integration with Apollo Federation, real-time Subscriptions, security, and p
2026-03-23 · 17 min read #graphql#rest#api#apollo#schemaThe Moment a User Request Becomes a VMI: virt-api and Admission Flow
Describes what validation, defaulting, subresource handling, and migration request creation virt-api performs as KubeVirt's API entry point, based on source code.
2026-03-20 · 5 min read #architecture#kubevirt#kubernetes#virtualization#apiLLM Application Development Practical Guide: Mastering ChatGPT API, Claude API, and Gemini API
A practical guide to LLM application development covering ChatGPT API, Claude API, and Gemini API.
2026-03-17 · 22 min read #llm#openai#claude#gemini#apiHBase Client API Basics
Learn the basics of the HBase Client API used to interact with HBase.
2022-09-26 · 2 min read #hbase#api#java