https://ilham.dev/tags/api/Recent content in Api on ilham.devHugo -- gohugo.ioenSun, 27 Sep 2026 00:00:00 +0700https://ilham.dev/posts/how-to-build-a-basic-auth-header-for-testing/Sun, 27 Sep 2026 00:00:00 +0700https://ilham.dev/posts/how-to-build-a-basic-auth-header-for-testing/Basic Auth sends a username and password encoded with Base64 inside an Authorization header. It is not encryption by itself. The Basic Auth Header tool helps with the mechanical part, but I still check the result before using it somewhere real.https://ilham.dev/posts/how-to-build-mock-api-responses-that-look-real-enough/Sun, 27 Sep 2026 00:00:00 +0700https://ilham.dev/posts/how-to-build-mock-api-responses-that-look-real-enough/Mock responses help frontend and integration work move before the real backend endpoint is finished. The API Mock Response Builder tool gives me a safe place to test the idea before I put it into a script, server, or production workflow.https://ilham.dev/posts/how-to-read-and-verify-jwt/Sun, 27 Sep 2026 00:00:00 +0700https://ilham.dev/posts/how-to-read-and-verify-jwt/A JWT is one of those strings that looks scary the first time you see it. It often appears in a login response, browser storage, or an API request header:https://ilham.dev/posts/how-to-compare-json-without-being-distracted-by-formatting/Sun, 27 Sep 2026 00:00:00 +0700https://ilham.dev/posts/how-to-compare-json-without-being-distracted-by-formatting/A JSON diff should compare meaning, not indentation. Two JSON documents can look different as text but still contain the same data. The JSON Diff tool is useful because it lets me check the result in a small, controlled place before I use it in a bigger workflow.https://ilham.dev/posts/how-to-convert-curl-commands-into-code/Sun, 27 Sep 2026 00:00:00 +0700https://ilham.dev/posts/how-to-convert-curl-commands-into-code/API documentation often gives examples as curl commands: curl -X POST https://api.example.com/users \ -H "Authorization: Bearer TOKEN" \ -H "Content-Type: application/json" \ -d '{"name":"Ana"}' That is useful for testing, but eventually I need the same request in application code.https://ilham.dev/posts/how-to-create-and-check-hmac-signatures/Sun, 27 Sep 2026 00:00:00 +0700https://ilham.dev/posts/how-to-create-and-check-hmac-signatures/HMAC proves that a message was created by someone who knows the shared secret, and that the signed message has not changed. The HMAC Generator tool gives me a safe place to test the idea before I put it into a script, server, or production workflow.https://ilham.dev/posts/how-to-debug-cors-without-guessing/Sun, 27 Sep 2026 00:00:00 +0700https://ilham.dev/posts/how-to-debug-cors-without-guessing/CORS errors are frustrating because the browser often shows a scary message, but the real cause is usually a small missing header. You may see something like this in the browser console:https://ilham.dev/posts/how-to-format-json-before-debugging-it/Sun, 27 Sep 2026 00:00:00 +0700https://ilham.dev/posts/how-to-format-json-before-debugging-it/JSON is easier to debug when it is valid and formatted. A formatter turns one long line into a structure humans can read. The JSON Formatter tool gives me a safe place to test the idea before I put it into a script, server, or production workflow.https://ilham.dev/posts/how-to-look-up-http-status-codes-during-debugging/Sun, 27 Sep 2026 00:00:00 +0700https://ilham.dev/posts/how-to-look-up-http-status-codes-during-debugging/HTTP status codes are short signals from a server. They tell me whether a request succeeded, redirected, failed on the client side, or failed on the server side. The HTTP Status Codes tool helps me inspect the input and output without writing a one-off script first.https://ilham.dev/posts/how-to-read-a-curl-command-before-running-it/Sun, 27 Sep 2026 00:00:00 +0700https://ilham.dev/posts/how-to-read-a-curl-command-before-running-it/A curl command is an HTTP request written for the terminal. Before running one from documentation or chat, I want to know what it will send. The curl Tester tool gives me a safe place to test the idea before I put it into a script, server, or production workflow.https://ilham.dev/posts/how-to-read-an-openapi-file-before-using-an-api/Sun, 27 Sep 2026 00:00:00 +0700https://ilham.dev/posts/how-to-read-an-openapi-file-before-using-an-api/An OpenAPI file is machine-readable API documentation. It describes endpoints, inputs, outputs, and authentication expectations. The OpenAPI Viewer tool gives me a safe place to test the idea before I put it into a script, server, or production workflow.https://ilham.dev/posts/how-to-read-http-headers/Sun, 27 Sep 2026 00:00:00 +0700https://ilham.dev/posts/how-to-read-http-headers/HTTP headers are small pieces of metadata sent with a request or response. They can explain things that are not visible in the page body. When a website or API behaves strangely, I often look at the headers first.https://ilham.dev/posts/how-to-test-an-http-request-before-writing-code/Sun, 27 Sep 2026 00:00:00 +0700https://ilham.dev/posts/how-to-test-an-http-request-before-writing-code/Before I put an API call into code, I like to prove the request works by itself: URL, method, headers, body, and response. The HTTP Request Tester tool gives me a safe place to test the idea before I put it into a script, server, or production workflow.https://ilham.dev/posts/how-to-test-grpc-when-http-tools-are-not-enough/Sun, 27 Sep 2026 00:00:00 +0700https://ilham.dev/posts/how-to-test-grpc-when-http-tools-are-not-enough/gRPC APIs do not look like normal REST endpoints. Instead of paths like /users, you call service methods with typed messages. The gRPC Tester tool gives me a safe place to test the idea before I put it into a script, server, or production workflow.https://ilham.dev/posts/how-to-test-webhooks-safely/Sun, 27 Sep 2026 00:00:00 +0700https://ilham.dev/posts/how-to-test-webhooks-safely/A webhook is a simple idea: one system sends an HTTP request to another system when something happens. For example: Stripe sends a webhook when a payment succeeds; GitHub sends a webhook when someone pushes code; Shopify sends a webhook when an order is created.https://ilham.dev/posts/how-to-understand-snap-bi-asymmetric-signature/Sun, 27 Sep 2026 00:00:00 +0700https://ilham.dev/posts/how-to-understand-snap-bi-asymmetric-signature/SNAP BI signatures can feel confusing because they combine several ideas at once: HTTP method; URL path; request body hash; timestamp; RSA private and public keys; a signature header. When all of those appear together, it is easy to get lost.https://ilham.dev/posts/how-to-use-json-viewer-for-large-api-responses/Sun, 27 Sep 2026 00:00:00 +0700https://ilham.dev/posts/how-to-use-json-viewer-for-large-api-responses/A JSON viewer is for exploring structure. It helps me see objects, arrays, nested fields, and repeated records without reading one long block of text. The JSON Viewer tool is useful because it lets me check the result in a small, controlled place before I use it in a bigger workflow.https://ilham.dev/posts/how-to-use-jsonpath-to-find-data/Sun, 27 Sep 2026 00:00:00 +0700https://ilham.dev/posts/how-to-use-jsonpath-to-find-data/Small JSON is easy to read. Large JSON is different. A real API response can contain nested objects, arrays, metadata, and fields you do not care about. JSONPath helps ask focused questions like:https://ilham.dev/posts/how-to-validate-json-with-a-schema/Sun, 27 Sep 2026 00:00:00 +0700https://ilham.dev/posts/how-to-validate-json-with-a-schema/When an API receives JSON, it usually expects a certain shape. If one field is missing or one value has the wrong type, the request may fail. A JSON Schema describes that expected shape.