Tag

api-design

8 articles tagged with “api-design”

AI AI-Search API-gateway ASP.NET-Core Azure-APIM Azure-OpenAI CI Claude CoT Copilot Cosmos-DB Cursor DORA Event-Grid GPT Gemma GitFlow GitHub HPA ICL JSON JSON-mode LLM LLM-security MCP Mistral Model-Context-Protocol OIDC Omit Partial Phi Pick Pinecone Qdrant RAG ReAct Record SDK SLI SLM SLO Semantic-Kernel Service-Bus Windsurf a-star agents aggregation ai ai-gateway aks alerting algorithms api-design api-gateway api-versioning apim app-router app-service appsec architecture arm-templates aspnet-core aspnetcore async audit authentication authorization automation azure azure-front-door azure-functions azure-openai azure-policy azure-storage bdd benchmarks best-practices bfs bicep binary-search branching bst cache-components caching cap-theorem chain-of-thought chatbot ci-cd ci-optimization cicd clean-architecture cloud cloud-security cloudevents code-review coding-agents comparison compliance compose concurrency concurrent-rendering conditional-types consistency consistent-hashing constraints consumer-driven containers context contract-testing cosmos-db cost-control cost-optimization coverage cqrs csharp cve cypress dapper dast data-fetching databases dataloader ddd decision-framework dependency-injection dependency-scanning deployment-slots deployments deprecation design-patterns devops dfs dijkstra discriminated-unions distributive docker documentation dotnet dotnet-9 drift-detection dynamic-programming e2e-testing ef-core ef-core-9 embeddings engineering environments error-budget evaluation event-driven event-grid event-hubs eventing examples feature-flags federation few-shot fiber fine-tuning flaky-tests flex-consumption frontend function-calling generics git github-actions golden-signals gpt-4o graph graphql grpc hcl health-checks heap hooks hotchocolate http http2 http3 hybridcache iac idempotency identity in-context-learning indexes infer inference infrastructure integration integration-testing introsort isolation jailbreak jest joins jotai jsonb jwt k8s key-remapping key-vault kiota knapsack knowledge-base kubernetes language legacy-code linq load-balancing lower-bound managed-identity mapped-types materialized-views memoization memory merge message-queue messaging metrics microservices minimal-apis mocking mocks model-routing modules mongodb monitoring msw multi-agent multi-stage-builds multi-tenant mvcc narrowing network-security nextjs-16 normalization nosql oauth oauth2 observability oidc opa openapi orchestration output-format owasp paas pact pactflow page-objects parsing partitioning performance personal-AI pgvector pinecone pipeline planning playwright plugins policy-as-code polly postgresql production prompt-design prompt-engineering prompt-injection protobuf pulumi python quality quality-gates quantization queues rag rate-limiting react react-19 react-compiler react-internals react-query react-server-components realtime reasoning recursion recursive-types red-black red-green-refactor red-teaming redis regression-testing release-management resource-limits rest reusable-workflows rls rolling-updates runtime-safety saga-pattern sast sbom scale schema schema-design sdlc secrets-management security security-testing self-consistency serializable server-actions serverless service-bus sharding shortest-path signalr snapshot-testing software-design sorting spies sql stability state-management streams stride structured-output stubs supertest supply-chain system-design tail-call tanstack-query task-framing tdd template-literals terraform test-architecture test-doubles test-pyramid testcontainers testing testing-patterns testing-strategy threat-modeling token-bucket token-economics tokens tool-calling tool-use topological-sort transactions trees trie trunk-based type-guards type-predicates type-system type-transforms typescript unit-testing utility-types validation valkey vault vector-db vector-search version-control visual-regression vitest vulnerabilities weaviate web-api web-security websockets window-functions wiremock workload-identity workspaces xunit yarp zero-shot zero-trust zod zustand

REST Principles in 2026: Resources, Idempotency, and Problem Details

REST Principles in 2026: Resources, Idempotency, and Problem Details

The five constraints that still matter (resources, methods, status codes, statelessness, cacheability), idempotency keys, RFC 9457 problem+json, cursor pagination over OFFSET, ETags + 304s, ASP.NET Core 9 MapGroup.

28 Jan 202613 min

GraphQL with HotChocolate 14: Projections, DataLoaders, and Federation

GraphQL with HotChocolate 14: Projections, DataLoaders, and Federation

When GraphQL beats REST and when it does not, HotChocolate 14 on .NET 9 with [UseProjection] + source-generated DataLoaders, persisted operations, cost analysis, Apollo Federation v2 with @key fields.

30 Jan 202614 min

gRPC on .NET 9: HTTP/3, Streaming, Deadlines, and JSON Transcoding

gRPC on .NET 9: HTTP/3, Streaming, Deadlines, and JSON Transcoding

Four call patterns (unary/server/client/bidi), .NET 9 server + strongly-typed client over HTTP/3, deadlines + ServiceConfig retry policies, gRPC-Web for browsers, JSON transcoding so one service speaks gRPC and REST.

01 Feb 202614 min

WebSockets and SignalR: Heartbeats, Backplanes, and CSWSH Defense

WebSockets and SignalR: Heartbeats, Backplanes, and CSWSH Defense

WebSocket vs SignalR vs SSE vs WebTransport, .NET 9 SignalR Hub + MapHub, scale-out with Redis backplane or Azure SignalR Service, KeepAliveInterval heartbeats, JWT in query string, backpressure with Channels.

03 Feb 202613 min

API Versioning: URL, Header, Media Type, and Sunset Discipline

API Versioning: URL, Header, Media Type, and Sunset Discipline

Asp.Versioning 8 on .NET 9, URL/query/header/media-type schemes, additive evolution, one domain with multiple wire mappers, RFC 8594 Sunset + Deprecation headers, per-version OpenAPI documents.

05 Feb 202612 min

Rate Limiting on .NET 9: Token Buckets, Redis, and Tiered Policies

Rate Limiting on .NET 9: Token Buckets, Redis, and Tiered Policies

Built-in RateLimiter middleware with FixedWindow/SlidingWindow/TokenBucket/Concurrency, partition by user/API key, distributed counters with Redis Lua INCR/EXPIRE, 429 + Retry-After + RateLimit-* headers, layered with APIM.

07 Feb 202613 min

OpenAPI 3.1 on .NET 9: Built-in Spec, Scalar UI, and Kiota Clients

OpenAPI 3.1 on .NET 9: Built-in Spec, Scalar UI, and Kiota Clients

Microsoft.AspNetCore.OpenApi replacing Swashbuckle, OpenAPI 3.1 with JSON Schema 2020-12, Scalar / Redoc UIs, schema + document transformers, Kiota / NSwag SDK generation, Spectral lint + oasdiff in CI.

09 Feb 202613 min

API Gateways in 2026: YARP, Azure APIM, and the AI Gateway Pattern

API Gateways in 2026: YARP, Azure APIM, and the AI Gateway Pattern

YARP for in-process east-west traffic, Azure APIM north-south with policies for auth + rate limit + transform, BFF per channel, defense in depth, and the 2026 AI Gateway: token caps + semantic cache + token metrics.

11 Feb 202615 min