[B! api] daikikoharaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

daikikohara id:daikikohara

apiã«é–¢ã™ã‚‹daikikoharaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (98)

${{author_name}}$

{{author_name}} {{created}}

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

{{#following_bookmarks}}

${{author_name}}$

{{author_name}} {{created}}

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

{{/following_bookmarks}}

{{/is_wiped}}

API v2 ã®æ¦‚è¦
ã“ã®ãƒšãƒ¼ã‚¸ã¯ã¾ã æ—¥æœ¬èªžã§ã¯ã”åˆ©ç”¨ã„ãŸã ã‘ã¾ã›ã‚“ã€‚ã‚ˆã‚Šå¤šãã®è¨€èªžã§æ–‡æ›¸ãŒé–²è¦§ã§ãã‚‹ã‚ˆã†ã«ç¾åœ¨å–ã‚Šçµ„ã‚“ã§ã„ã¾ã™ã€‚æº–å‚™ãŒæ•´ã„æ¬¡ç¬¬ã€ç¿»è¨³ç‰ˆã‚’æä¾›ã„ãŸã—ã¾ã™ã®ã§ã€ã‚‚ã†å°‘ã—ãŠå¾…ã¡ãã ã•ã„ã€‚ Stripe API ã¯ã€ç•°ãªã‚‹ã‚¨ãƒ³ãƒ‰ãƒã‚¤ãƒ³ãƒˆãŒå«ã¾ã‚Œã‚‹ 2 ã¤ã®åå‰ç©ºé–“ã‚’æä¾›ã—ã¦ã„ã¾ã™ã€‚ API v1: /v1 åå‰ç©ºé–“ã«ã¯ã€ç¾åœ¨æ—¢å˜ã® Stripe API ã®å¤§éƒ¨åˆ†ãŒå«ã¾ã‚Œã¦ã„ã¾ã™ã€‚API v2: /v2åå‰ç©ºé–“ã«ã¯ã€/v2 ãƒ‡ã‚¶ã‚¤ãƒ³ãƒ‘ã‚¿ãƒ¼ãƒ³ã‚’ä½¿ç”¨ã™ã‚‹ã‚¨ãƒ³ãƒ‰ãƒã‚¤ãƒ³ãƒˆãŒå«ã¾ã‚Œã¾ã™ã€‚v1 ã¨ v2 ã®åå‰ç©ºé–“ã®ä¸»ãªé•ã„
daikikohara 2024/12/30
stripe

api
ãƒªãƒ³ã‚¯
rSQL - Landing
daikikohara 2024/09/29
api

sql
ãƒªãƒ³ã‚¯
Why, after 6 years, Iâ€™m over GraphQL
GraphQL is an incredible piece of techno logy that has captured a lot of mindshare since I first started slinging it in production in 2018. You wonâ€™t have to look far back on this (rather inactive) blog to see I have previously championed this techno logy. After building many a React SPA on top of a hodge podge of untyped JSON REST APIs, I found GraphQL a breath of fresh air. I was truly a GraphQL h
daikikohara 2024/05/31
graphql

rest

opinion

api
ãƒªãƒ³ã‚¯
Your API Shouldn't Redirect HTTP to HTTPS
TL;DR: Instead of redirecting API calls from HTTP to HTTPS, make the failure visible. Either disable the HTTP interface altogether, or return a clear HTTP error response and revoke API keys sent over the unencrypted connection. Unfortunately, many well-known API providers don't currently do so. Updates 2024-05-24: Added the Google Bug Hunter Team response to the report that the VirusTotal API resp
daikikohara 2024/05/29
api

security

best-practice
ãƒªãƒ³ã‚¯
typespec.io
Describe your data up front and generate schemas, API specifications, client / server code, docs, and more.
daikikohara 2024/04/30
api

dsl

documentation

openapi
ãƒªãƒ³ã‚¯
ä»¤å’Œæ™‚ä»£ã® API å®Ÿè£…ã®ãƒ™ãƒ¼ã‚¹ãƒ—ãƒ©ã‚¯ãƒ†ã‚£ã‚¹ã¨ CSRF å¯¾ç– | blog.jxck.io
Intro CSRF ã¨ã„ã†å¤ã®æ”»æ’ƒãŒã‚ã‚‹ã€‚ã“ã®æ”»æ’ƒã‚’ã€Œå¤(ã„ã«ã—ãˆ)ã€ã®ã‚‚ã®ã«ã™ã‚‹ã“ã¨ãŒã§ããŸãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã®é€²åŒ–ã®èƒŒæ™¯ã‚’ã€ã€ŒCookie ãŒ SameSite Lax by Default ã«ãªã£ãŸã‹ã‚‰ã ã€ã¨ã„ã†è§£èª¬ã‚’è¦‹ã‚‹ã“ã¨ãŒã‚ã‚‹ã€‚ ç¢ºã‹ã«ã€ç¾å®Ÿçš„ã«ãã‚Œã«ã‚ˆã£ã¦æ”»æ’ƒã®æˆç«‹ã¯é›£ã—ããªã‚Šã€æ•‘ã‚ã‚Œã¦ã„ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã‚‚ã‚ã‚‹ã€‚ã—ã‹ã—ã€ãã‚Œã¯ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ãŒç”¨æ„ã—ãŸå¯¾ç–ã®æœ¬è³ªã‹ã‚‰è¨€ã†ã¨ã€è§£é‡ˆãŒå°‘ã—ãšã‚Œã¦ã„ã‚‹ã¨è¨€ãˆã‚‹ã ã‚ã†ã€‚ ä»Šå›žã¯ã€ã€ŒCSRF ãŒã©ã†ã—ã¦æˆç«‹ã—ã¦ã„ãŸã®ã‹ã€ã‚’æŒ¯ã‚Šè¿”ã‚‹ã“ã¨ã§ã€æœ¬å½“ã«ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã«è¶³ã‚Šã¦ã„ãªã‹ã£ãŸã‚‚ã®ã¨ã€ãã‚Œã‚’è£œã£ã¦ã„ã£ãŸçµŒç·¯ã€æœ¬å½“ã«ã™ã¹ãå¯¾ç–ã¯ä½•ã§ã‚ã‚‹ã‹ã‚’è§£èª¬ã—ã¦ã„ãã€‚ çµæžœã¨ã—ã¦è¦‹ãˆã¦ãã‚‹ã®ã¯ã€ä»Šã‚µãƒ¼ãƒ“ã‚¹ã‚’å®Ÿè£…ã™ã‚‹ä¸Šã§ã®ã€Œãƒ™ãƒ¼ã‚¹ã€(not ãƒ™ã‚¹ãƒˆ)ã¨ãªã‚‹ãƒ—ãƒ©ã‚¯ãƒ†ã‚£ã‚¹ã ã¨ç†è€…ã¯è€ƒãˆã¦ã„ã‚‹ã€‚ CSRF æˆç«‹ã®æ¡ä»¶ ä¾‹ãˆã°ã€æ”»æ’ƒè€…ãŒç”¨æ„ã—ãŸ attack.examp
daikikohara 2024/04/27
api

csrf

security

header

best-practice
ãƒªãƒ³ã‚¯
Global rate-limiting API for distributed applications - rlimit.com
Start rate limiting user actions with a couple of lines. Protect your applications from abuse and ensure high availability for all users.
daikikohara 2024/03/12
rate-limit

api
ãƒªãƒ³ã‚¯
Mock API Builder - endpts
daikikohara 2024/02/18
mock

api
ãƒªãƒ³ã‚¯
API Security Trends 2023 â€“ Have Organizations Improved their Security Posture?
daikikohara 2023/10/04
api

security
ãƒªãƒ³ã‚¯
GitHub - ShishirPatil/gorilla: Gorilla: Training and Evaluating LLMs for Function Calls (Tool Calls)
ðŸš’ GoEx: A Runtime for executing LLM generated actions like code & API calls GoEx presents â€œundoâ€ and â€œdamage confinementâ€ abstractions for mitigating the risk of unintended actions taken in LLM-powered systems. Release blog Paper. ðŸŽ‰ Berkeley Function Calling Leaderboard : How do models stack up for function calling? ðŸŽ¯ Releasing the Berkeley Function Calling Leaderboard. Read more in our Release
daikikohara 2023/08/05
llm

api
ãƒªãƒ³ã‚¯
Serverless ClickHouse for Developers
daikikohara 2023/07/30
analytics

api

data
ãƒªãƒ³ã‚¯
Postman Acquires Akita for Automated API Observability | Postman Blog
daikikohara 2023/07/20
postman

api

observability

m&a
ãƒªãƒ³ã‚¯
GitHub - betwixt-labs/tempo: ðŸ¥ Don't miss a beat. Real-time, end-to-end typesafe APIs.
daikikohara 2023/06/17
api

type-safety

typescript
ãƒªãƒ³ã‚¯
API Security | Akamai
daikikohara 2023/05/22
api

security
ãƒªãƒ³ã‚¯
GitHub - dsdanielpark/Bard-API: The unofficial python package that returns response of Google Bard through cookie value.
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
daikikohara 2023/05/15
bard

api
ãƒªãƒ³ã‚¯
Postman Flows: The Next Generation of Software Development | Postman Blog
Learning Center Learn about how to get started using Postman, and read more in the product docs. Labs Flows, gRPC, WebSockets! Learn about the latest cutting-edge features brewing in Postman Labs. Blog The Postman blog is your hub for API resources, news, and community. Learn about the Postman API Platform and much more. In a world of plentiful and well-built APIs, we will have: APIs as building b
daikikohara 2023/04/04
postman

api

no-code
ãƒªãƒ³ã‚¯
Introducing ChatGPT and Whisper APIs
Developers can now integrate ChatGPT and Whisper models into their apps and products through our API. ChatGPT and Whisper models are now available on our API, giving developers access to cutting-edge language (not just chat!) and speech-to-text capabilities. Through a series of system-wide optimizations, weâ€™ve achieved 90% cost reduction for ChatGPT since December; weâ€™re now passing through those
daikikohara 2023/03/03
chatgpt

gpt

api
ãƒªãƒ³ã‚¯
API Security - 2023 Top Concerns | Treblle & Bill Doerrfeld
daikikohara 2023/02/25
api

security
ãƒªãƒ³ã‚¯
GitHub - microsoft/restler-fuzzer: RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.
RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services. For a given cloud service with an OpenAPI (formerly Swagger) specification, RESTler analyzes its entire specification, and then generates and executes tests that exercise the service through its REST API. RESTler intellige
daikikohara 2023/01/28
rest

api

security

test

fuzzing
ãƒªãƒ³ã‚¯
To infinity and beyond: enabling the future of GitHub's REST API with API versioning
AI & MLLearn about artificial intelligence and machine learning across the GitHub ecosystem and the wider industry. Generative AILearn how to build with generative AI. GitHub CopilotChange how you work with GitHub Copilot. LLMsEverything developers need to know about LLMs. Machine learningMachine learning tips, tricks, and best practices. How AI code generation worksExplore the capabilities and be
daikikohara 2022/11/30
github

api

versioning
ãƒªãƒ³ã‚¯
1 2 3 4 5 æ¬¡ã®ãƒšãƒ¼ã‚¸

ãŠçŸ¥ã‚‰ã›

ã‚‚ã£ã¨èªã‚€

å…¬å¼Twitter

@HatenaBookmark
ãƒªãƒªãƒ¼ã‚¹ã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“ã‚¹ã®ãŠçŸ¥ã‚‰ã›
@hatebu
æœ€æ–°ã®äººæ°—ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã®é…ä¿¡

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

jæ¬¡ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kå‰ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

lã‚ã¨ã§èªã‚€

eã‚³ãƒ¡ãƒ³ãƒˆä¸€è¦§ã‚’é–‹ã

oãƒšãƒ¼ã‚¸ã‚’é–‹ã

è¨å®šã‚’å¤‰æ›´ã—ã¾ã—ãŸx