API Design

Six years after the first edition, the official guide to DelphiMVCFramework is back, rewritten for 3.5.0-silicon. Thirty chapters, more than 550 pages, and 46 Delphi projects that compile and run. You build one real API, the Municipal Library, and grow it from a wizard-generated project into a deployed server with authentication, OpenID Connect, WebSockets and HTTPS.

“Happily purchased. Handy to have these in one place. Thank you!” — Kent Beck “Excellent new thinking on Domain-Driven Design. It's full of real practical experience in getting the most value from domain modelling. Just like the Eric Evans' DDD book, this gives more insight each time you read it.” — Ian Russell

"Mastering Postman" is the ultimate guide for anyone looking to streamline their API development process. Whether you're a seasoned developer or just starting, this book will take you through every step of the API lifecycle and equip you with the knowledge and tools to create better APIs faster.

Valuable and accessible products and services are the most important assets for any business, especially in the digital economy. Through clear step-by-step explanations and real-life examples, you’ll learn the foundations of the API Product Management methodology. It will help you to create, launch, and run digital products customers love.

Every web application has security headers, cookies, TLS configurations, and CORS policies that need to be correct. Most teams find out they're wrong only after a penetration test — or worse, after an incident. This book shows you how to build a scanner that catches these issues automatically. You'll create a Python CLI tool that uses Hurl (declarative HTTP testing) to assert security properties, SSLyze to validate TLS protocol versions, and AI to generate specific remediation for every failure it finds. The output: structured JSON reports, visual HTML dashboards, and AI-generated security posture assessments. **What you'll build:** - 9 declarative Hurl security test files (headers, cookies, CORS, HSTS, CSP, CSRF, redirects, TLS) - A preprocessor that handles domain substitution and authentication - An output parser with built-in remediation guidance for every test - A TLS scanner validating SSL 2.0/3.0 disabled and TLS 1.2/1.3 enabled - An AI analyzer that generates context-specific fixes using Ollama, OpenAI, or Bedrock - An HTML reporter with dark-themed visual dashboards - Docker multi-architecture deployment - CI/CD pipeline with GitHub Actions **Who this is for:** - Developers who want security checks before deploying - DevSecOps engineers building CI/CD security gates - Penetration testers who need quick baseline assessments - Security students learning web vulnerability concepts hands-on - Platform teams enforcing security standards across services Every failure includes: what was expected, what was received, why it matters, how to fix it, and a documentation link. AI adds domain-specific code examples on top.

This book provides a cookbook of guidelines on designing beautiful (simple to use) and practical (simple to implement) RESTful API.

Building high-performance JSON services and APIs in Go takes more than writing efficient handlers. This book takes you inside the Go runtime, standard library and HTTP stack to uncover where bottlenecks occur and how to eliminate them. Learn practical, production-tested techniques for building fast, secure and reliable services that stand up to real-world workloads.

A controller is a promise you keep making. Learn when to build one, how to design for failure, and what it takes to own it.

Master practical system design with 62 parts covering distributed systems, scalability, databases, security, and production architecture. A comprehensive engineering handbook with real-world examples, diagrams, and decision frameworks.

A production crisis. Three developers. Fifty cinematic comic lessons. Master Java threads, race conditions, synchronization, and deadlocks through an unforgettable manga-style adventure.

Build a practical gRPC foundation through visual explanations of service contracts, remote calls, streaming, reliability, security, and operations.

Build a practical understanding of Model Context Protocol from the first local server to production operations. Visual explanations connect protocol contracts, hosts and clients, authorization, testing, reliability, observability, deployment, and recovery.

Design reliable, secure, and evolvable APIs with visual explanations, practical HTTP and OpenAPI examples, and production troubleshooting. Follow the path from service boundaries and contracts to resilience, safe change, and operations.

A practical guide to building reliable LLM integrations that hold up in production. Learn how to design provider-agnostic APIs, handle failures, add observability and security, and keep your architecture maintainable. With a complete Python codebase, this book turns proven patterns into working software.

AI models do not have to be huge, slow or expensive. Distilling Intelligence explores how to build smaller models that perform at scale, then secure the APIs that serve them. From compression and distributed serving to extraction attacks, observability and incident response, this book covers what it takes to run AI reliably in the real world.