https://escalopa.com/en/categories/backend/Recent content in Backend on EscalopaHugo -- gohugo.ioenahmed.helaly.dev@google.com (Ahmed Helaly)ahmed.helaly.dev@google.com (Ahmed Helaly)© 2026 Ahmed HelalyTue, 16 Jun 2026 00:00:00 +0000https://escalopa.com/en/posts/designing-evolvable-rest-apis/Wed, 10 Jun 2026 00:00:00 +0000ahmed.helaly.dev@google.com (Ahmed Helaly)https://escalopa.com/en/posts/designing-evolvable-rest-apis/Compatibility comes from additive change, explicit semantics, and a deprecation path clients can observe.https://escalopa.com/en/posts/grpc-deadlines-and-error-semantics/Wed, 02 Oct 2024 00:00:00 +0000ahmed.helaly.dev@google.com (Ahmed Helaly)https://escalopa.com/en/posts/grpc-deadlines-and-error-semantics/Deadlines cross service boundaries; status codes must separate retryable transport conditions from domain outcomes.https://escalopa.com/en/posts/openapi-as-an-executable-contract/Wed, 23 Jul 2025 00:00:00 +0000ahmed.helaly.dev@google.com (Ahmed Helaly)https://escalopa.com/en/posts/openapi-as-an-executable-contract/Treat the schema as reviewed source code and test implementations and clients against it.https://escalopa.com/en/posts/cursor-pagination-that-survives-concurrent-writes/Fri, 19 Jul 2024 00:00:00 +0000ahmed.helaly.dev@google.com (Ahmed Helaly)https://escalopa.com/en/posts/cursor-pagination-that-survives-concurrent-writes/A cursor must encode a stable total ordering, not merely an offset into changing rows.https://escalopa.com/en/posts/idempotency-keys-for-write-apis/Tue, 24 Dec 2024 00:00:00 +0000ahmed.helaly.dev@google.com (Ahmed Helaly)https://escalopa.com/en/posts/idempotency-keys-for-write-apis/Bind a client key to request identity and persist the decided response for the retry window.https://escalopa.com/en/posts/oauth-2-0-boundaries-for-backend-engineers/Tue, 23 Sep 2025 00:00:00 +0000ahmed.helaly.dev@google.com (Ahmed Helaly)https://escalopa.com/en/posts/oauth-2-0-boundaries-for-backend-engineers/Validate issuer, audience, signature, expiry, and scopes at the resource boundary.https://escalopa.com/en/posts/webhooks-that-can-be-retried-safely/Tue, 10 Dec 2024 00:00:00 +0000ahmed.helaly.dev@google.com (Ahmed Helaly)https://escalopa.com/en/posts/webhooks-that-can-be-retried-safely/Sign payloads, preserve event identity, acknowledge quickly, and make processing replay-safe.https://escalopa.com/en/posts/rate-limiting-with-token-buckets/Sat, 14 Sep 2024 00:00:00 +0000ahmed.helaly.dev@google.com (Ahmed Helaly)https://escalopa.com/en/posts/rate-limiting-with-token-buckets/Token buckets express sustained rate and burst capacity while keeping admission decisions cheap.https://escalopa.com/en/posts/validating-requests-without-leaking-internals/Mon, 28 Apr 2025 00:00:00 +0000ahmed.helaly.dev@google.com (Ahmed Helaly)https://escalopa.com/en/posts/validating-requests-without-leaking-internals/Separate syntactic validation, domain rules, and authorization, then return stable problem details.https://escalopa.com/en/posts/api-versioning-without-permanent-forks/Fri, 24 Jan 2025 00:00:00 +0000ahmed.helaly.dev@google.com (Ahmed Helaly)https://escalopa.com/en/posts/api-versioning-without-permanent-forks/Prefer compatible evolution; version only when semantics truly conflict and plan convergence.https://escalopa.com/en/posts/designing-batch-endpoints/Sun, 10 Nov 2024 00:00:00 +0000ahmed.helaly.dev@google.com (Ahmed Helaly)https://escalopa.com/en/posts/designing-batch-endpoints/Batch APIs need per-item outcomes, bounded size, deterministic identity, and explicit atomicity.https://escalopa.com/en/posts/safe-file-upload-pipelines/Tue, 05 Nov 2024 00:00:00 +0000ahmed.helaly.dev@google.com (Ahmed Helaly)https://escalopa.com/en/posts/safe-file-upload-pipelines/Stream with hard limits, quarantine content, verify type independently, and decouple scanning from trust.https://escalopa.com/en/posts/integrating-unreliable-third-party-apis/Mon, 07 Jul 2025 00:00:00 +0000ahmed.helaly.dev@google.com (Ahmed Helaly)https://escalopa.com/en/posts/integrating-unreliable-third-party-apis/Put timeouts, quotas, translation, idempotency, and observability behind an anti-corruption layer.https://escalopa.com/en/posts/websockets-with-bounded-resources/Tue, 16 Jun 2026 00:00:00 +0000ahmed.helaly.dev@google.com (Ahmed Helaly)https://escalopa.com/en/posts/websockets-with-bounded-resources/Every connection needs limits for authentication, queues, heartbeats, fan-out, and shutdown.https://escalopa.com/en/posts/graphql-n-plus-one-and-dataloader/Thu, 26 Mar 2026 00:00:00 +0000ahmed.helaly.dev@google.com (Ahmed Helaly)https://escalopa.com/en/posts/graphql-n-plus-one-and-dataloader/Batching fixes duplicate fetch shape only when caching scope and authorization remain request-local.