API Design

Design APIs developers enjoy using, with guides on REST, GraphQL, versioning, and contracts that stay stable as your application and clients evolve.

A long wall of sealed panels with particles pooling behind each one, and a single open door with a bright stream flowing through

Server-Side Development, Web Development, Backend, Security, API Design 7 min read

Server-Side Security: Authorisation Is the Weak Point

Injection grabs attention, and authorisation causes breaches. Broken access control has been the top web application risk for four consecutive editions, and it's found in essentially every application tested.

A bright central cube connected by unbroken lines to many smaller cubes, near ones sharp and bright, distant ones dim and faded

Server-Side Development, Web Development, Mobile, Backend, Architecture, API Design 7 min read

Mobile Backends: You Can't Force an Update

Most advice about mobile backends is just backend advice. What actually makes them different is that the client is a version of your app from two years ago that you cannot change.