Whetstone

HTTP & APIs in Practice

What actually crosses the wire and how to debug it: a request as text, which methods are safe to retry and how an Idempotency-Key makes a POST retry-safe, curl as the tool that shows you the exchange, the API styles you'll be asked to choose between (REST, gRPC, tRPC), how credentials travel and how a JWT is verified, the browser rule CORS relaxes, and what changes when the answer can't come back in the same response — 202 + polling, push channels, and webhooks you verify and dedupe.

  1. 1. Request & response anatomy

    Full · Intro · ~30 min
    • HTTP
    • Idempotency & Retries

  2. 2. curl as a debugging tool

    Lesson · Core · ~30 min
    • HTTP
    • curl

  3. 3. REST vs RPC vs gRPC (and where tRPC and GraphQL fit)

    Lesson · Core · ~25 min
    • HTTP
    • REST
    • RPC, gRPC & tRPC

  4. 4. Auth over HTTP: sessions, bearer tokens and JWTs

    Full · Core · ~40 min
    • Auth
    • HTTP
    • JWT

  5. 5. CORS & preflight: the browser's rule, the server's opt-in

    Full · Core · ~35 min
    • HTTP
    • CORS

  6. 6. Sync vs async APIs: 202, push channels and webhooks

    Full · Advanced · ~40 min
    • HTTP
    • Idempotency & Retries
    • Async APIs & Push
    • Webhooks