HTTP QUERY (RFC 10008): a safe method with a body for complex searches
Alessandro Corbelli~7 min
The new HTTP QUERY method, now RFC 10008, lets you run complex searches with a body while staying safe and idempotent: what it is and how it works.
~/tags/api
Cloudflare opens self-managed OAuth to every developer
Alessandro Corbelli~7 min
As of June 2026, anyone using Cloudflare can create their own OAuth clients with fine-grained permissions instead of broad API tokens. What it is, the problem it solves, and why it matters for people…
A standard HTTP header to say an API is deprecated (RFC 9745)
Alessandro Corbelli~6 min
The HTTP Deprecation header becomes an IETF standard: a machine-readable way to signal that an endpoint is being retired. What it is, how it works, and why it matters.
OAuth 2.0: the new security best practices (RFC 9700)
Alessandro Corbelli~6 min
The IETF has published RFC 9700, the updated Best Current Practice for OAuth 2.0 security: what it is, what changes and why it matters for logins and APIs.