MikeTrendsTrends right now

search

API clients

Trends

  1. 1
    JPA-Inspired ORM Brings Shared Java Entities to SQLite●Use managed ORM sessions, relationships, lazy loading, JPQL queries, and optimistic locking with shared Java entities onMmastodonTechnologyMobile32 d ago

    Developers are discussing an approach that brings Java Persistence API-style features to SQLite, allowing managed ORM sessions, relationships, lazy loading, JPQL queries, and optimistic locking with entities shared between a mobile client and backend. The idea is that the same Java entity classes can be reused across Android, iOS-adjacent tooling, and server code, reducing duplication in data layers.

  2. 2
    DriveWealth breach exposes personal and investment data worldwide▼DriveWealth security breach exposes personal and investment data globally✉newsTechnologyCybersecurity1 d ago

    DriveWealth, a US-based investment infrastructure firm whose API powers trading for many brokerage apps, has suffered a security breach exposing personal and investment data of users globally. The incident raises concerns about data protection at financial technology providers that handle sensitive client information behind the scenes for consumer trading platforms.

  3. 3
    Building Safer API Clients: Timeouts, Retries and Backoff●Build safer API clients with timeouts, retry limits, exponential backoff, jitter, Retry-After, and idempotency. # prograMmastodonTechnologySoftware31 d ago

    Developers are being reminded that robust API clients need more than a simple retry loop. A widely shared guide outlines six core practices: setting timeouts, capping retry attempts, using exponential backoff, adding jitter to avoid thundering herds, honoring server Retry-After headers, and designing requests to be idempotent. The advice targets backend and web developers whose naive retry logic can accidentally amplify outages instead of recovering from them.

  4. 4
    Keycloak flaw lets stolen passwords bypass mandatory MFA●CVE-2026-105305 affects Red Hat build of Keycloak. The OIDC Device Authorization Grant flow does not enforce a client'sMmastodonTechnologyCybersecurity11 d ago

    A vulnerability tracked as CVE-2026-105305 affects the Red Hat build of Keycloak. The OIDC Device Authorization Grant flow fails to enforce a client's minimum authentication level, meaning a stolen password could bypass mandatory multi-factor authentication and gain access to the Admin REST API. No exploitation has been confirmed, and Red Hat has a fix available. Security practitioners are sharing the advisory and urging admins to patch promptly.

  5. 5
    Figma restricts MCP access to whitelisted clients●Figma restricts MCP access to whitelisted clients, excluding Pi https://twitter.com/GayaniFigma/status/21052956299413504MmastodonTechnology36 d ago

    Figma has limited access to its Model Context Protocol server to a whitelist of approved clients, excluding Pi. The move, announced by a Figma employee, restricts which AI-powered development tools can connect to Figma's API for design data. Developers are debating whether the tighter controls protect the platform or close off an open ecosystem for AI tooling.

Repos