https://muhammadamal.my.id/tags/api/ Recent content in Api on Hi, I'm Muhammad Amal Hugo en-us Wed, 30 Jul 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/rate-limiting-resilience-patterns-modern-apis/ Wed, 30 Jul 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/rate-limiting-resilience-patterns-modern-apis/ A working playbook for keeping API services up under load and degrading gracefully when they can’t. https://muhammadamal.my.id/blog/opentelemetry-grpc-go-production-walkthrough/ Mon, 28 Jul 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/opentelemetry-grpc-go-production-walkthrough/ OpenTelemetry has stabilized enough that you can wire it up once and forget. Here’s the configuration that ships. https://muhammadamal.my.id/blog/schema-first-api-development-with-buf/ Wed, 23 Jul 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/schema-first-api-development-with-buf/ buf turns protobuf from a code generator into a real schema platform. Here’s the workflow that actually scales across teams. https://muhammadamal.my.id/blog/api-gateway-architectures-2025-envoy-gateway-kong/ Mon, 21 Jul 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/api-gateway-architectures-2025-envoy-gateway-kong/ Both gateways are mature in 2025. The right choice depends less on features than on how your platform team wants to operate. https://muhammadamal.my.id/blog/streaming-grpc-realtime-data-guide/ Wed, 16 Jul 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/streaming-grpc-realtime-data-guide/ Streaming gRPC is more than calling Send in a loop. Here’s how to build streams that don’t fall over in production. https://muhammadamal.my.id/blog/securing-internal-microservices-jwt-spiffe-2025/ Mon, 14 Jul 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/securing-internal-microservices-jwt-spiffe-2025/ SPIFFE gives you trustworthy workload identity. JWT gives you portable claims. Together, they replace static service tokens. https://muhammadamal.my.id/blog/connect-go-browser-friendly-grpc-tutorial/ Wed, 09 Jul 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/connect-go-browser-friendly-grpc-tutorial/ Connect-Go gives you gRPC ergonomics with a wire format browsers can actually speak. Here’s how to use it well. https://muhammadamal.my.id/blog/grpc-deep-dive-2025-high-throughput-patterns/ Mon, 07 Jul 2025 09:00:00 +0700 https://muhammadamal.my.id/blog/grpc-deep-dive-2025-high-throughput-patterns/ What still trips people up about gRPC in 2025, and the production patterns that actually move the needle. https://muhammadamal.my.id/blog/mtls-service-mesh-or-application-layer/ Wed, 24 Jul 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/mtls-service-mesh-or-application-layer/ Choosing between mesh-terminated and application-terminated mTLS in 2024, with Envoy 1.30 and Go 1.22 implementations and the failure modes that decide it. https://muhammadamal.my.id/blog/openapi-first-go-oapi-codegen/ Mon, 22 Jul 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/openapi-first-go-oapi-codegen/ How I run an OpenAPI-first workflow with oapi-codegen 2.x in Go 1.22, including schema patterns and CI discipline that keeps spec and code aligned. https://muhammadamal.my.id/blog/rate-limiting-redis-token-bucket-sliding-window/ Wed, 17 Jul 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/rate-limiting-redis-token-bucket-sliding-window/ Token bucket vs sliding window rate limiting in Redis, with Go code, Lua scripts, and the operational tradeoffs that decide which one to ship. https://muhammadamal.my.id/blog/choosing-api-gateway-2024/ Mon, 15 Jul 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/choosing-api-gateway-2024/ Comparing Kong 3.7, Tyk, and Envoy Gateway in 2024 by the operational tradeoffs that actually decide gateway choice in production. https://muhammadamal.my.id/blog/securing-go-microservices-jwt/ Wed, 10 Jul 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/securing-go-microservices-jwt/ Production JWT patterns for Go microservices in 2024 using golang-jwt v5, covering signing, validation, and context plumbing. https://muhammadamal.my.id/blog/grpc-internal-services-go-buf/ Mon, 08 Jul 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/grpc-internal-services-go-buf/ How I wire up gRPC for internal Go services in 2024 with buf CLI 1.34, lint rules, and breaking change detection. https://muhammadamal.my.id/blog/federated-graphql-apollo-router/ Wed, 03 Jul 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/federated-graphql-apollo-router/ Federated GraphQL patterns I rely on with Apollo Router 1.48 in 2024, drawn from real subgraph deployments. https://muhammadamal.my.id/blog/graphql-vs-rest-2024/ Mon, 01 Jul 2024 09:00:00 +0700 https://muhammadamal.my.id/blog/graphql-vs-rest-2024/ An opinionated comparison of GraphQL and REST in 2024, drawn from production Go services, not benchmarks. https://muhammadamal.my.id/blog/jira-rest-api-v3-automation-patterns/ Thu, 04 May 2023 09:00:00 +0700 https://muhammadamal.my.id/blog/jira-rest-api-v3-automation-patterns/ Hard-won lessons from wiring Jira Cloud into n8n and Node automations. Auth, ADF documents, JQL pagination, webhook signatures, and the gotchas that ate my week. https://muhammadamal.my.id/blog/backend-api-security-2022/ Wed, 02 Nov 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/backend-api-security-2022/ Backend API security threat model 2022: real threats, working mitigations, priority order. https://muhammadamal.my.id/blog/n8n-jira-rest-api-v3/ Mon, 09 May 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/n8n-jira-rest-api-v3/ Connect n8n to Jira REST API v3. API token, built-in node, JQL, HTTP fallback for missing operations. https://muhammadamal.my.id/blog/rust-json-api-axum/ Wed, 16 Mar 2022 09:00:00 +0700 https://muhammadamal.my.id/blog/rust-json-api-axum/ JSON API in Rust with Axum 0.4. Router, extractors, state, error handling, tower middleware. Minimal real backend.