en.osm.town is one of the many independent Mastodon servers you can use to participate in the fediverse.
An independent, community of OpenStreetMap people on the Fediverse/Mastodon. Funding graciously provided by the OpenStreetMap Foundation.

Server stats:

268
active users

#api

14 posts14 participants1 post today

Hoe staat het ervoor met de API Design Rules van de Nederlandse overheid? Tim van der Lippe van @Logius schreef als beheerder van de standaard een blogpost met de nieuwste inzichten en ontwikkelingen.

Werk jij met API’s in het publieke domein? Blijf op de hoogte en lees de update hier 👉 developer.overheid.nl/blog/202

developer.overheid.nl · Status update API Design Rules | developer.overheid.nlOp woensdagmiddag 26 maart 2025 kwam het Kennisplatform API's bijeen om de laatste ontwikkelingen rond API's te bespreken.

📚 Check out this recent article on best practices for file uploads.

Popular approaches:
1. Uploading a file by itself, like adding an avatar.
2. Uploading a file with metadata, like a video with a title and description.
3. Importing a file from a URL, like an avatar from Facebook.

Best practices:
+ Check Content-Type and Content-Length
+ Secure file uploads

Read the full article: apisyouwonthate.com/blog/api-d

#API #Development #BestPractices #FileUploads

By @Philsturgeon

APIs You Won't Hate · API Design Basics: File UploadsHow does a REST API handle uploading images or spreadsheets when it normally only handles JSON or XML?

"Let me be blunt.

If your startup offers APIs and you don’t have a portal, you’re lighting developer acquisition money on fire. 💵 🧯🚒

Here’s what a good portal actually does:

Shortens time-to-value: faster POCs, faster adoption.

Reduces support tickets: devs can find what they need.

Builds trust: your API feels stable, documented, and ready.

Increases conversion: when docs show how easy it is to integrate, not just tell.

Still sending PDF onboarding packets to partners?

C’mon, boo. 🥲"

quetzalliwrites.com/newsletter

Quetzalli WritesQuetzalli Writes | Educational Tech Content & Ghostwriting¡Hola, Tech Writing Friends! Your API is powerful. Even your docs are pretty decent. But… where the hell is your developer portal ? If you’re shipping APIs and expecting developers to magically integrate without a centralized place to get credentials, try out endpoints, or even find updated gui

»[…] Der Entwickler der Anwendungen, […], veröffentlichte laut dem Bericht eigentlich #geheim zu haltende Informationen wie Schlüssel für #Program'mierschnittstellen (#API's), #Passwort'er oder #Verschlüsselung'skeys zusammen mit den #Quelltext'en der #Apps. […]«

Echt jetzt, dies geschieht heutzutage noch? .env Files oder gar direkt im #Code setzt mensch keine Passwörter & Co. öffentlich in seiner #Git Distro. Dies betrifft leider sehr viele Menschen.

😬 heise.de/news/Datenleck-1-5-Mi

heise online · Datenleck: 1,5 Millionen private Fotos von Dating-Apps für LGBTQ+ enthülltBy Stefan Krempl
Continued thread

another part of my day job involves working around systems designed to prevent mass AI-driven scraping, because humans and well-behaved query scripts are accidentally caught up in all the war-of-the-scrapers, because Cloudflare etc are offering what seems to management to be a magic bullet, and putting the bluntest of tools in front of anywhere that needs to be public, including APIs.
#scraping #api

Part of my day job involves using APIs to retrieve public data from third party public websites, some of which were never designed to publish raw data, so I tread lightly, no more than a human-driven query.
Part of my day job is preventing third party machines from hammering servers I run by incessant mass scraping - hundreds of thousands of ridiculous requests humans would never do or want (typically that's AI-driven scraping that doesn't abide by robots.txt).
I feel conflicted.
#scraping #api

Here's a fun fact. You don't need to pay for the Twitter API if you know the post you want to retrieve.

The Twitter embedding service provides a fully inflated JSON response. It includes parents to replies, quote posts, links to media, total number of likes, retweets, replies, etc.

Here's an example of someone replying to me:

cdn.syndication.twimg.com/twee

You need to add a token to the end, but it can be any random string. No other restrictions.

Very useful for archiving.

@walkinglampshade @jrredho @fj It's basic #InfoSec, really:

Thus #Signal fails at protevting #Journalists and theor sources because they do have that data and can be #subopena'd for it if they don't already provide #BulkSurveillance & #LawfulInterception #API|s to comply with #CloudAct. (Or are you guys so naive and believe @Mer__edith will risk dying of old age in jail for non-paying users?)

  • This entire "thread vector" just doesn't exist with #XMPP+#OMEMO nor #PGP/MIME!

And if you believe "this won't ne used/abused me because I'm from 'Murica!" and point at #ANØM as an example, then you really ignored all tze #Cyberfacism since 9/11…

Twitterthaddeus e. grugq on Twitter“I’m gonna tell you a secret about “logless VPNs” — they don’t exist. Noone is going to risk jail for your $5/mo https://t.co/Q2aOQJkG4g”