Questions tagged [api]
An application programming interface (API) is the specification for which software is meant to be used by other software.
-4
votes
0answers
24 views
How does token limiting work for API?
In the tool im using, they have 4 terms
Token rate-limit
Token rate-limit-time (in minutes)
Application rate-limit
Application rate-limit-time (in minutes)
and one example of values is like
(8000, ...
0
votes
1answer
70 views
Is It good practice on API design to use different object model for getting object and creating
While mostly every company got it's standard on APIs, the question just came out after that one of my colleagues stated we must use different object models for creating and getting objects from API.
...
45
votes
9answers
9k views
Should you guard against unexpected values from external APIs?
Lets say you are coding a function that takes input from an external API MyAPI.
That external API MyAPI has a contract that states it will return a string or a number.
Is it recommended to guard ...
2
votes
3answers
70 views
Permissive vs. Strict API Message validation
We had a interesting debate today over what our REST API should default to doing when validating a request body where unexpected fields are present. I think we ended the conversation in a good place, ...
1
vote
0answers
27 views
API as system controller
I'm developing a system, and I've had a question that might help other people.
The system would be written in PHP, with a lot of chance of turning a mobile app later, too. Normally, I would create it ...
1
vote
1answer
85 views
Methods to Securing APIKeys
I have read on several methods to securing an API key like gitignore or placing in another file if using an application, but at some point if taken the time, anyone can get the key, even when apikey ...
1
vote
1answer
73 views
Am I making API creation difficult when it comes to authentication?
I know the sites are not geared for recommendations so I am hoping to pose this question in a way that doesn't ask for recommendations. Questions comments are welcome.
I am just getting involved in ...
0
votes
1answer
39 views
how to build a stable API product and allow specification per project?
I am in search of information on how I to manage code in git flow and methodology to test and work with it :
I have an API in place to build and manage a product catalog and it was designed around ...
-3
votes
0answers
16 views
Instagram API Client Approval for Production on iOS
Looking to take my instagram api client to production so it's not limited to 5 users.
I read the docs but still not quite sure about how the process works since it says the app needs to be in ...
6
votes
3answers
282 views
Should a high-performance API expose low-performance utility functions?
Context: I'm working on an open source project to solve a problem that comes up in ad-tech and social media data mining: indexing boolean expression trees, and matching them against incoming documents....
0
votes
1answer
63 views
How to test an API that can change the response during time?
I currently use the Google trends API and I implemented a class to integrate with its services.
As you probably know, Google trends tracks statistics which will change over time.
So, when I write ...
-1
votes
0answers
19 views
Handing routing in PHP scripts, or via the web server (NGINX)
For many years I've used PHP frameworks mostly to help with routing. My goto is usually Slim, Symphony, or a pick of mix of packages using composer as I rarely require the full features of a framework....
2
votes
6answers
220 views
Difference between REST & HTTP REST implementations
REST principles are described here:
https://www.ics.uci.edu/~fielding/pubs/dissertation/rest_arch_style.htm#sec_5_2
https://en.wikipedia.org/wiki/Representational_state_transfer#...
1
vote
1answer
59 views
Is GraphQL REST compliant (almost)?
I am writing an article about traditional REST vs GraphQL.
However, after doing some research about REST (not just a specific implementation of REST), I started to see that GraphQL actually abides to ...
3
votes
1answer
81 views
params T[] vs IEnumerable<T> as parameter type
I know there's a proposal for params IEnumerable<T>.
When designing an API, when should we choose params T[] (params array) over IEnumerable<T>. Or should both be implemented for better ...
3
votes
3answers
177 views
Should you retry 500 API errors?
My team and I are integrating with a 3rd party company and using their API to perform different CRUD operations. Their API isn't always reliable though. Maybe 0.1% of the time an API call just fails ...
-1
votes
1answer
54 views
Method that takes array parameter [duplicate]
I want to implement two methods: AddPlayers and AddPlayer. Is it better when AddPlayers calls AddPlayer or AddPlayer calls AddPlayers with a single item array? Is there a significant difference in ...
4
votes
3answers
146 views
Is checking if something exists responsibility of a caller or an API?
Is it better for an API when it provides additional methods that check if something exists before adding?
For example:
if (!userManager.HasPermission(user, "somePermission")
userManager....
0
votes
3answers
78 views
How to structure a set of classes that deal with external APIs for maximum testability?
I'm developing a set of classes designed to communicate with external APIs, and I'm running into trouble with how to properly structure everything for proper loose coupling and unit testing.
...
-1
votes
1answer
70 views
Any solution for scheduling a “high volume traffic” mode on API?
I have been wondering if there is any way to design and develop a mechanism for a REST API for scheduling some sort of "high volume" traffic so it does not conflict with normal rate-limiting. This ...
1
vote
2answers
78 views
API design - indicate that results were truncated
For reasons, my search endpoint returns a maximum of 50 results.
I'm struggling with how best to tell the caller that their results were limited to 50.
The best I've come up with is returning some ...
-1
votes
0answers
34 views
When is an API Manager/Gateway product necessary? Would you use it for Backend For Frontend services?
I have been using different API Management solutions for quite some time now, as some clients encouraged or forced its use to manage APIs and microservices.
However I feel in many cases there could ...
1
vote
0answers
17 views
Handling coherent state changes in DB through API
A simplified version of my DB:
Appointment
id INT PK
datetime DATETIME
AppointmentChangeRequest
id INT PK
user_id INT FK
appointment_id INT FK
request_datetime DATETIME
...
0
votes
1answer
91 views
Should I access the backend directly or through an API layer?
Please allow me to ask my question using an example where we have a database with flight data and I want to make a web app where users can search, select, and book a flight.
I wrote some classes ...
-3
votes
1answer
99 views
Correct response for API, 404 or {response: “not found” } [closed]
I'm not sure on the correct procedure for returning a status code for a GET request in a RESTful API request.
Lets say I make a get request to get a users details from the server. However that user ...
1
vote
1answer
46 views
Separation between regular web site requests and API requests
I have a doubt about the architecture of a web app when it comes down to differentiating between regular website requests and API requests.
For the purpose of explaining, suppose I am the creator of ...
0
votes
3answers
64 views
Nesting Objects without Passing Arguments?
I have a couple of classes that I've nested together (not in the sense you may think so bare with me), to create what I call a prefab object (similar to Unity's prefab system).
In this particular ...
1
vote
3answers
194 views
Does providing multiple APIs reduce code re-use
Within an organisation, suppose you have an internal tool used by different teams and for different use cases. This package offers APIs in different languages.
One could say that having multiple APIs ...
1
vote
0answers
40 views
Difference between API server and Gateway
I'm working on a VOIP startup currently and deciding which software stack will be best. I'm doing a lot of research of how other people do it, like Discord. It's really hard to make some of these ...
0
votes
1answer
49 views
Exceeded limit for API pagination
I'm implementing an API with pagination which has max_results that can be specified by the client. The server will have a hardcoded limit, for example 100 results per page.
In the situation when the ...
0
votes
4answers
132 views
In API design, if I request a list of objects by ID, and one of those IDs is invalid/deleted, should the request fail?
Let's say I'm requesting a list of IDs for which I'd like to receive relevant DB entities (e.g., my-restaurant-api.com?restaurants=1,2,3).
In this example, let's say ID 3 has been deleted and should ...
0
votes
1answer
39 views
Cross-domain data binding
I've been developing several front-end web-applications recently that bind against a database using a RESTful CRUD api.
I've noticed a massive amount of boilerplate code going into defining the API. ...
0
votes
1answer
87 views
Composition of microservices. Good or bad thing?
Hopefully this topic is not opinionated and I could maybe get meaningful answer please. Our problem is, imagine you have two microservices: Car and Driver. DTO of the driver could be let's say as ...
-1
votes
4answers
118 views
When streaming JSON to end users, should each buffer be standalone JSON?
If you were streaming JSON to the end user, and every "buffer" of response was in the format of, for instance...
{ "something": "here", "other": 1}
You'd be in a spot where the entire stream ...
4
votes
5answers
400 views
Should we tailor APIs to the customer, or ask the customer to use the existing one?
I am a sole developer and I recently wrote a new web application in the form of a API with Swagger and front-end. This was customers could use the API on their own, usually forscripting.
It is ...
1
vote
1answer
145 views
Can (Java) Interfaces be referred to as APIs? [duplicate]
I am trying to understand what exactly an API is.
From my current understanding, an API (Application Programming Interface) is a contract provided by a software instance, that guarantees a defined ...
0
votes
2answers
62 views
Preferred method signature for API method involving DB interactions
I recently got into discussion about how the method signature should look like for an API method which doesn't expose internal objects used by application to caller. Here is how situation looks:
Our ...
0
votes
1answer
41 views
Can websites written in JavaScript make requests to SOAP API's?
I have an API written in SOAP 1.2 that I am trying to give to a developer whose website is written in Javascript and said they can not request the file because they do not know PHP. From my ...
2
votes
4answers
143 views
User calling REST APIs on behalf of a different user
Here's an example:
GET /posts
POST /posts
GET /posts/{post_id}
PUT /posts/{post_id}
This api is being used by SUPER_ADMIN as well as CONTENT_WRITERS. Its working great. If user is logged in as a ...
1
vote
2answers
116 views
Is it good design to provide interfaces in a library that would only be used for unit testing?
Contrapositive-ish question: What is the design reason a library class would not implement an interface as a convenience to the developer? (e.g. the .Net library class FileInfo)
The FileInfo class ...
0
votes
1answer
61 views
Is there an equivalent to HTTP status codes for WebSockets messages?
I'm developing a WebSocket API and I was wondering if there was either a standard or best practice for responding to client messages. For example, if my API is expecting only stringified numbers but ...
0
votes
2answers
97 views
Check or not objects in a Javascript API?
I'm writing an API in JavaScript, and I'm confused whether or not I should check if the API user is passing me the correct type on which the API expects to work. Actually not the type, but if you are ...
0
votes
1answer
47 views
Fastest way to return a list of records depending on many many-to-many relationships
I'm developing an API in Rails and the following requirement is established (it's really more complicated, but I want put a simple example):
There are users and messages.
users have a gender (...
0
votes
2answers
126 views
What HTTP action and return value should be used on resource's action
I have a question about how I should implement a new action for a resource on my API layer.
I have a Timesheet which is used by people to let us know how many hours they worked on a job. This ...
5
votes
4answers
179 views
How to expose field constraints using HATEOAS?
For example we have entity object:
{
"id": 10,
"name": "First object",
"status": "new",
"manager_id": 200,
"links": [
{
"href": "self",
"type" : "...
0
votes
3answers
151 views
How can a headless client securely know the API version of a multi-instance backend?
I'm working in a scenario where I have a backend (let's call it the server) and a frontend client app (let's call it the client).
The client is entirely headless, and can connect to any instance of ...
2
votes
5answers
367 views
In a REST API, should you correct user input on server side?
We have a REST API with an endpoint accepting JSON data from the client. One of the JSON fields is a URL that will be rendrered to other users as a hyperlink to a website page associated to the ...
0
votes
2answers
122 views
New version of REST API - deploy two services?
Assume you need to define a completely new REST API for a given service. These rest APIs are distinguished by something like "v1" and "v2" in the path.
If you develop these services in Java, would ...
1
vote
1answer
110 views
Best practice API design for mobile app in sending multiple photos in one request?
I'm working on API design for a mobile app where the user can send one or more photos that will be stored in the database.
Currently I have three routes, post photo/create which will send one photo ...
0
votes
1answer
115 views
Should I opt to not use someone's API?
At a job that I recently started, I inherited some of the projects from the guy who previously held this position. One of the projects was a program that used a Website Platform's public API to get ...
