discover-api

REST API design requires layering authentication mechanisms like OAuth or JWT alongside authorization controls. This skill guides resource modeling, HTTP semantics, and security implementation to build robust APIs from the start, covering authentication setup, token validation, and access control patterns.

Rate limiting protects APIs from abuse by restricting request frequency per client. This skill covers rate-limiting strategies, quota management, and performance optimization techniques to prevent server overload while maintaining service availability for legitimate users.

GraphQL schema design requires thoughtful field organization, resolver patterns, and authentication/authorization hooks to prevent data exposure. This skill provides guidance on schema modeling, query complexity limits, and security best practices specific to GraphQL development.

REST uses resource-based endpoints with fixed data shapes; GraphQL uses flexible query language for precise data fetching. This skill compares both approaches, covering versioning strategies, error handling, authentication differences, and when each architecture suits your backend requirements.

Error handling and versioning prevent client breakage and improve debugging. This skill covers error response standards, status codes, version migration patterns, and deprecation strategies to maintain API stability across backend development lifecycle.

Authentication method choice depends on user type and security requirements. This skill compares OAuth for delegated access, JWT for stateless authentication, and API keys for service-to-service communication, helping you select the right approach for your API security model.