All Questions

Tagged with
Filter by
Sorted by
Tagged with
-1 votes
1 answer
33 views

What is the convention for deciding which resource to place an endpoint under? [closed]

I have an endpoint that teachers can use to invite students to a virtual classroom by providing their emails in a list format. Let's call it POST invite-students. I have these four resources: api/v1/...
  • 101
1 vote
2 answers
335 views

Should a client / server share error codes?

I am in two minds about sharing client / server errors codes. We are writing both ends of the system, if our API was external this would not be possible, but that requirement is very unlikely. So an ...
  • 161
-1 votes
2 answers
188 views

Is there a name for this common web application architecture?

It's an architecture where the client-side consumes data from, and sends data to, a back-end REST API. I would like to learn more about it, but I don't know the name of it.
2 votes
2 answers
127 views

Authenticate users (REST-API)

What I'm trying to build REST-API using Express and SQLite 5 to 10 authors should be able to post articles to /articles except them, no one is allowed to post anything My approach to build it ...
  • 129
0 votes
0 answers
83 views

Handle big data sets in a web application in combination with real-time communication between web-clients

We have the following use case to be developing: A web application that shows a data table / data grid with up to 100000 rows and 30-50 columns. Each column is filterable and sortable. The web ...
4 votes
3 answers
535 views

Why not use SQL to query an API instead of GraphQL?

nalzok posted an interesting question over a year ago: "Why not use SQL instead of GraphQL?". Respondents seem to suggest three main problems: One should not directly expose one's database ...
45 votes
8 answers
9k views

Is it common practice to validate responses from 3rd party APIs?

I'm working on a PHP web application that depends on a few 3rd-party services. These services are well documented and provided by fairly large organisations. I feel paranoid when working with ...
-1 votes
3 answers
71 views

Is there a secure way to ensure a data in an API endpoint of mine came from an Instagram endpoint?

Is there a way through encryption/keys/jwt or anything else to ensure that the data being sent through a POST request is only data coming from another request I made on the client to a 3rd party ...
  • 229
0 votes
2 answers
93 views

How sensible is it to build a website/app etc. using an external api?

Wanting to expand my programming horizons I recently started building a website. I have started to build up my website and it is heavily focused around an external api. The reason for using this api ...
0 votes
1 answer
144 views

Where is the distinction between a web application and an API?

This question is highly related to this over question. I'm asking another question between I still am a bit confused on the topic. The Issue I Ran Into I currently have a Django web application ...
  • 157
6 votes
5 answers
12k views

Is creating ViewModels in Web API a bad practice?

So, somebody at work who is twice as experienced than I am, told us that we must not create ViewModel classes within Web API. (We are using Angular for UI) In his opinion ViewModel is ASP.NET MVC ...
0 votes
1 answer
752 views

Adding resources to subresource REST API

I'm trying to build an web API that closely represents a library of books. I currently have the following routes. GET /api/books GET /api/books/:bookID GET /api/libraries POST /api/libraries This ...
37 votes
5 answers
13k views

Why not use SQL instead of GraphQL?

Recently I learned about GraphQL which claims to be superior to RESTful. However, I started wondering why don't we simply put SQL statements into an HTTP GET request. For example, in GraphQL I would ...
  • 519
0 votes
2 answers
147 views

How to describe an API-like request that is browser-to-browser?

I'm building a web application that has a feature which allows visitors to directly access resources using URL patterns, for example: www.site.com/client/[clientID]/orders www.site.com/client/[...
2 votes
1 answer
53 views

Creating backend system, over API

I recently came across a demand to create a web system (which will be done in PHP, but is for any language), to have the same functionalities of a mobile application already ready. This app has a ...
  • 29
1 vote
1 answer
121 views

API Architecture: Should the API update the database on it's own? Or should there be another service to tell it to update the database?

I am working on a project which has a requirement to records in the database every day. I currently have a REST API which does the usual CRUD functions. Should I create a service within the ...
  • 143
4 votes
2 answers
2k views

Realtime frontend dashboard, calling api every 3 seconds, reduce cpu loads

I am working on a networking project. Where I am creating a dashboard to view real time status (CPU/memory usage, up/down traffic and few others) of multiple routers by calling API request to server ...
  • 141
0 votes
1 answer
3k views

How can I safely expose web API endpoints for user-private data?

I'm building a web application wherein users CRUD their own private data. Can I safely expose API endpoints? Despite years in-industry and endless web-research, I'm not clear on the best ...
5 votes
2 answers
767 views

What should I think of when making an internal API public? [closed]

An internal API I've built will soon be consumed by a third party. Should I open the current internal API to the public, or should I create a new API endpoints for external access?
  • 201
4 votes
4 answers
1k views

Should I avoid using CORS if possible?

I'm writing an API that will interface with an SPA front-end. For simplicity I currently have the API at api.example.com, and the SPA itself is at example.com. I have CORS set up and everything is ...
  • 149
3 votes
2 answers
4k views

Fully API-based website - is it a good idea?

I sometimes hear about making web-site fully API based, meaning that even in browser the page is constructed based on API endpoint and practically nothing else. One of the benefits I see in this is ...
3 votes
1 answer
347 views

How is approval done in cors via preflight request?

As far as I have known in CORS, browser sends preflight with OPTIONS request to the server to gain approval for the real subsequent GET/POST request. Now, HTTP is sessionless. Is the custom header THE ...
0 votes
1 answer
724 views

Backend as a service or deploying my own backend

I currently have a web application running with my own backend, but maintaining it is becoming a bit painful so I was considering the option of using an existing BaaS (Firebase). The main problems I ...
  • 113
5 votes
1 answer
4k views

Client Side Filtering or Server Side Filtering

So I am building a web-app. The app will be hosted on heroku and I using a MEAN Stack for development. The main purpose of the app is to allow users to search through data and be able to find a ...
0 votes
3 answers
2k views

How to structure a SaaS application?

The Problem I need to develop a Software-as-a-Service application, that will be used from our clients. The application contains a lot of forms (Company Application) using a step-by-step forms. They ...
13 votes
4 answers
8k views

Is it better to make database calls or external API calls first in the context of a single Web request?

Say you have a Web app that uses data from both a database and an external API, and for certain pieces of functionality, you need to call in to both in order to read/write the necessary data. Is it ...
  • 283
3 votes
1 answer
4k views

How to use own REST API in web front end?

I have implemented a JSON-based REST API for a simple blog. The API allows for the creation, viewing, deletion and modification of user info, blogs, blog posts, comments, 'likes', etc. Some of these ...
  • 171
4 votes
2 answers
3k views

What's the best way of building an administrative UI for an existing SPA application?

I’m working on an application where the client-side interface and backend server are completely separate applications. The backend is written in Ruby and only serves JSON via HTTP. The client is a ...
  • 179
3 votes
1 answer
512 views

Website as an API client vs using the API only when needed?

I'm developing a website (using Django) which will depend on an API for it's main functionality which is create/update/delete objects. But the API also provides: User sign up and login User ...
  • 141
0 votes
1 answer
743 views

REST and RPC in multi-tier API

My team is developing a multi-tier API with scalability and modularity in mind. The public access point of the API is fully REST. However, we are splitting the data access layer as another tier in our ...
  • 121
5 votes
2 answers
3k views

How to organize methods that check username/email availability in a REST API?

I am developing a RESTful API in my project, but I do not have experience on that. To fill these gaps I've been watching some videos, mainly from Apigee, which are great. One situation brings a lot of ...
  • 1,365
0 votes
2 answers
181 views

How to manage potentially outdated data from WikiMedia API

I am writing a web application that pulls small parts of articles from Wikipedia and presents them to users. I do not wish to delete entries of the articles because I do not want to be sending a ...
4 votes
3 answers
2k views

What is the best way to implement different views of one resource in RESTful manner?

Imagine, there is a resource, for example event. User is able to get list of events in HTML format. He should be able to view that list in two ways: as a list and as a calendar. How the API should ...
88 votes
3 answers
193k views

Difference between Web API and Web Service?

I have heard a lot about Web Services and Web APIs, is there any difference between them or are they the same?
  • 1,279
2 votes
1 answer
546 views

Question about API and Web application code sharing

This is a design question. I have a multi part application with several user types. There is a user client for the patient that interacts with a web service. There is an API evolving behind the web ...
  • 23
17 votes
3 answers
33k views

How do web APIs work? [closed]

I have heard of many web APIs like that of Facebook, Twitter, etc., which helps third party access data and manipulate it. I would like to know how a web API works. What are the basics of a web API? ...
  • 1,279