Iurii Uses: #API

vatnode.dev – EU VAT Validation API

Developer-first SaaS API for EU VAT validation via VIES with Redis caching, change monitoring, and webhook notifications.

HTPBE.TECH – Has This PDF Been Edited?

SaaS platform for PDF authenticity verification with a public REST API.

Why a Node worker writes every confirmed order to Airtable alongside the primary database, and what belongs in that snapshot and what doesn’t.

How to call a logistics provider’s API from an order-processing worker, and why some booking APIs answer immediately and others don’t.

How to wire an external accounting or bookkeeping API into a payment flow, and why the call belongs in the queued worker, not the webhook handler.

WebSocket reconnection for production: heartbeat dead-connection detection, exponential backoff with jitter, resubscription, and message replay.

API key management for a public SaaS: hashing keys at rest, prefix + last-4 display, fail-closed validation, and revocation.

Webhook security past the signature: replay attacks, payload trust, DoS, IP allow-listing, and secret rotation – what verification does not protect.

Idempotency key API design: make POST retries that don’t double-charge – Postgres key table, ON CONFLICT claim, response replay, TTL, edge cases.

Self-host a Node.js API on a €6/month VPS: Caddy reverse proxy, Docker Compose, zero-downtime deploy script, and GitHub Actions CI – complete production setup.

Redis rate limiting for APIs: sliding window ZADD with Lua atomicity, in-memory fallback, multi-tier limits by IP and API key, and clear response headers.