HTTP APIs

larsggu.me › Reference

Reference index

Every entry in the reference, listed alphabetically with the topic it belongs to. The topic groupings repeat below the table for readers who arrived from a category link.

Twelve entries, alphabetical by term.
TermTopicSummaryLast modified
API versioningData shapeThe mechanism by which an interface changes without breaking the callers already written against it, and the definition of which changes require it.2026-09-06
audit eventData shapeAn append-only record of who did what to which object and when, written for later reconstruction rather than for debugging.2026-09-06
cursor paginationTransportPaging through a collection with an opaque position marker rather than a numeric offset, so that concurrent writes do not cause rows to be skipped or repeated.2026-09-06
error envelopeData shapeA single response shape for every failure, so that a caller can write one handler rather than one per endpoint.2026-09-06
idempotency keyTransportA caller-supplied identifier that lets a request be repeated safely, because the server records the outcome against the key and replays it instead of acting twice.2026-09-06
OAuth 2.0 authorization codeIdentityThe OAuth 2.0 flow used when a human authorises an application to act on their behalf, exchanging a short-lived code at the authorisation server for a token.2026-09-06
OAuth 2.0 client credentialsIdentityThe OAuth 2.0 flow for machine-to-machine access, in which the application authenticates as itself with no user present and no user consent involved.2026-09-06
rate limit headersTransportThe response headers by which a service tells a caller how much of its quota is left and when it resets, so the caller can pace itself rather than discover the limit by being refused.2026-09-06
SAML single sign-onIdentityA browser-mediated exchange in which an identity provider issues a signed statement about a user and the application accepts it in place of its own login.2026-09-06
SCIM provisioningIdentityA published HTTP schema, RFC 7644, by which an identity provider creates, updates, deactivates and groups accounts in an application without anyone administering them by hand.2026-09-06
tenant isolationOperationsThe guarantee that one customer's data in a shared system cannot be read, written or inferred by another, enforced at the query layer rather than in application logic.2026-09-06
webhook deliveryTransportAn outbound HTTP request a service makes to a customer-supplied URL when an event occurs, replacing the need for the customer to poll for changes.2026-09-06

By topic

Transport

Identity

Data shape

Operations

Last modified 2026-09-06.