Blog — Auray

Blog

Product notes and engineering write-ups from the Auray team. Posts go up when there is something to share.

Engineering4 Sept 20262 min read

An idempotency key has an owner

Two services that generate the same identifier used to collect each other's work, silently. The fix is one status code, and the reason it took a while to see is that the failure looked exactly like success.

Read the post

Product3 Sept 20262 min read

The model name is the address

Most APIs put the model in the payload and the version in the path. Doing the opposite makes a model you read about somewhere immediately callable, and makes switching one a change to the URL rather than a rewrite.

Read the post

Engineering2 Sept 20263 min read

Webhooks you can actually verify

A shared secret means both sides hold the thing that proves authenticity, and rotating it means telling every customer. A public key means only one side can sign, and rotation is something you never have to hear about.

Read the post

Read what shipped, then build on it

Every change to the API and the app is dated in the changelog, the day it landed — and the app is where you try it.

Start creating Read the changelog