DEV Community

API

Application Programming Interface

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
My Pay-Per-Call API Was Unpayable — 60 Lines of Python Fixed the x402 Flow
marcuschen-dev profile

My Pay-Per-Call API Was Unpayable — 60 Lines of Python Fixed the x402 Flow

#api #crypto #python #web3
Comments
3 min read
What Is IDOR? How Can Changing an ID Expose Someone Else's Data?
aditya_d_sharma profile

What Is IDOR? How Can Changing an ID Expose Someone Else's Data?

#api #cybersecurity #infosec #security
1
Comments
5 min read
I Built a Pay-Per-Call Tools API That Only Accepts USDC — $0.01 to $0.03 a Call
marcuschen-dev profile

I Built a Pay-Per-Call Tools API That Only Accepts USDC — $0.01 to $0.03 a Call

#webdev #api #crypto #python
Comments
3 min read
A free image-generation API with no key and no account — and the three failures that look like success
kavel profile
ohan

A free image-generation API with no key and no account — and the three failures that look like success

#showdev #ai #api #python
Comments
7 min read
Your Recipe App Is Hiding a Silent Video
parsajiravand profile

Your Recipe App Is Hiding a Silent Video

#javascript #webdev #browser #api
1
Comments
5 min read
GPT-6 Astra, Claude Fable, Gemini 3.8: A Busy Week for New LLM Releases (No Price Changes Though)
adrasmussen profile

GPT-6 Astra, Claude Fable, Gemini 3.8: A Busy Week for New LLM Releases (No Price Changes Though)

#ai #llm #api #webdev
Comments
3 min read
Generating request payloads for `oneOf` with `discriminator` in OpenAPI, without generating garbage
itfabers profile

Generating request payloads for `oneOf` with `discriminator` in OpenAPI, without generating garbage

#webdev #programming #api #testing
Comments
2 min read
HMAC Proves Origin, Not Freshness: Replay Attacks Against Signed APIs
roxdavirox profile
Davi

HMAC Proves Origin, Not Freshness: Replay Attacks Against Signed APIs

#api #authentication #cybersecurity #security
Comments
6 min read
Working: HTTP parameter pollution attacks APIs because WAFs evaluate one parameter value while frameworks execute a different one
roxdavirox profile
Davi

Working: HTTP parameter pollution attacks APIs because WAFs evaluate one parameter value while frameworks execute a different one

#api #backend #cybersecurity #security
Comments
5 min read
API Versioning: When /api/v1/ Survives Without the Authentication Added in /api/v2/
roxdavirox profile
Davi

API Versioning: When /api/v1/ Survives Without the Authentication Added in /api/v2/

#api #backend #cybersecurity #security
Comments
5 min read
Race Conditions in APIs: TOCTOU in Payments, Coupons, and Rate Limiting
roxdavirox profile
Davi

Race Conditions in APIs: TOCTOU in Payments, Coupons, and Rate Limiting

#api #backend #cybersecurity #security
Comments
6 min read
CRLF Injection in API Responses: When User Input Reaches HTTP Headers
roxdavirox profile
Davi

CRLF Injection in API Responses: When User Input Reaches HTTP Headers

#api #backend #cybersecurity #security
Comments
5 min read
gRPC Security: The Authorization Model REST Scanners Cannot See
roxdavirox profile
Davi

gRPC Security: The Authorization Model REST Scanners Cannot See

#api #backend #cybersecurity #security
Comments
5 min read
Mass Assignment in REST APIs: When the Framework Binds More Than It Should
roxdavirox profile
Davi

Mass Assignment in REST APIs: When the Framework Binds More Than It Should

#api #backend #security
Comments
5 min read
Postman's Secret Variables Are Not Secret: How Public Workspaces Expose 4,000+ Live Credentials
roxdavirox profile
Davi

Postman's Secret Variables Are Not Secret: How Public Workspaces Expose 4,000+ Live Credentials

#api #cybersecurity #infosec #security
Comments
6 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.