NetBay journal

API & Automation

36 practical API & Automation articles from Netbay Engineering — written for operators running Linux and Windows VPS in India.

36 articles in this topic

Subscribe via RSS

Session vs Token Auth for Your Web API Endpoints

Compare server-side sessions with stateless tokens across scalability, revocation, and security to choose your web API authentication model today.

API & AutomationJun 8, 20267 min read

Automating Daily Server Chores with Cron-Style Orchestration

Automate daily server chores with cron and systemd timers that drive backups, patching, and cert renewal, plus a fleet-wide converge pass.

API & AutomationJune 3, 20267 min read

Rate Limiting Your REST API with HTTP 429

Rate limiting protects both sides of an API. Token buckets, the standard 429 headers, and what well-behaved clients should do with Retry-After.

API & AutomationMay 28, 20267 min read

Implementing Refresh Tokens Safely in Production

Field-proven guidance on issuing, rotating, storing, and revoking refresh tokens without introducing session-hijack security holes for your API.

API & AutomationMay 27, 20268 min read

Infrastructure as Code: Declarative, Testable, Reviewable

Apply the four IaC principles — declarative, version-controlled, reviewable, testable — to stop infrastructure drift and sketchy manual changes.

API & AutomationMay 19, 20267 min read

JWT Explained: Claims, Signatures, and Where to Store Them

Understand JWT structure, signing algorithms, and token storage so you can avoid XSS and CSRF exposure when securing your API against attackers.

API & AutomationMay 18, 20268 min read

Designing Webhook Endpoints Clients Can Trust

Webhooks fail, arrive twice, and get spoofed. Sign payloads, retry with backoff, and make handlers idempotent so clients build on them safely.

API & AutomationMay 14, 20267 min read

A Layered API Security Checklist for Production

A production-ready API security checklist covering transport, auth, validation, throttling, and monitoring before you ship your API to production.

API & AutomationMay 11, 20268 min read

Managing Terraform State: Local, Locking, and Caution

Manage Terraform state safely: keep it in a remote backend with locking, never hand-edit it, and use state commands for real renames.

API & AutomationMay 6, 20267 min read

API Authentication Options Ranked: Keys, Tokens, mTLS

Compare API keys, bearer tokens, and mTLS to pick the right authentication method for your machine-to-machine API clients and workloads of every kind.

API & AutomationMay 4, 20267 min read

HTTP Methods and Idempotency in Practice

GET, PUT, DELETE, and POST each carry a different retry guarantee. Use the method contract plus idempotency keys so clients retry safely.

API & AutomationApril 30, 20266 min read

Terraform Basics: Providers, State, and Plan

Start with Terraform by wiring a provider, declaring resources, and learning how plan plus state turn infrastructure changes into a safe diff.

API & AutomationApril 21, 20267 min read