Skip to main content

Building a Secure Database-Centric OpenAPI in 15 Minutes

· 16 min read
Yiming
Co-founder of ZenStack

Cover image

If you are a developer familiar with RESTful APIs, you might have heard of OpenAPI. It is a specification for describing RESTful APIs in a format readable for humans and machines. Building a public-facing OpenAPI includes three tasks:

  1. Authoring an OpenAPI specification which serves as the contract between the API provider and the API consumer.
  2. Implementing the API endpoints based on the specification.
  3. Optionally, implementing client SDKs for consuming the API.

In this post, you'll see how to accomplish all these tasks and build a database-centric OpenAPI service, secure and documented, within 15 minutes.

Multi-Tenancy Implementation Approaches With Prisma and ZenStack

· 10 min read
Jiasheng
Co-founder of ZenStack

Cover Image

Collaboration has become crucial in the contemporary business landscape. This is due to the mounting complexity of the challenges we face, as well as the prevalence of remote work. Businesses are realizing that effective collaboration is the key to success, as it promotes teamwork, enhances productivity, and leads to better outcomes.

Prisma Client Extensions: Use Cases and Pitfalls

· 7 min read
Yiming
Co-founder of ZenStack

Cover image

Although still experimental, Client Extensions are one of the most exciting features introduced in recent Prisma releases. Why? Because it opens a door for developers to inject custom behaviors into PrismaClient with great flexibility. This post shows a few interesting scenarios enabled by this feature, together with thoughts about where we should set the boundary to avoid overusing its power.

Exposing Databases to the Internet: Seriously?

· 6 min read
Yiming
Co-founder of ZenStack

Cover image

One big piece of conventional wisdom for software operation is "never expose internal-facing services to the public", and databases (especially SQL databases) fall into that category. It's good advice because data stored in them are usually highly sensitive and indispensable to most systems' proper running. Investigations with honeypots showed that publicly open databases are discovered within hours after they become active and start getting attacked within a day. What's scarier than this is you often don't even know you ever had a data breach.

What Made Me Pay That $10/Mon For GitHub Copilot

· 6 min read
Yiming
Co-founder of ZenStack

Cover image

I initially tried GitHub Copilot, just briefly, around the beginning of 2022. It raised my attention partly due to its name - I hold a private pilot license and have always been an aviation enthusiast. At that time, I found the idea intriguing, but the product usability was not so satisfactory: both in terms of speed and quality of generation. I started to reuse it about three months ago, and now it has become indispensable to me and worth every penny of that $10/mon that I pay.

What makes me a happy customer? Let's figure it out.

Decoding the Evolving Landscape of Web Development

· 7 min read
Yiming
Co-founder of ZenStack

Cover Image

Web development, especially frontend, is undoubtedly one of the most challenging professions in software development. Its landscape is constantly evolving. Tools and technologies become obsolete and replaced by new ones at an astonishing speed. It has also become a vast field, way beyond HTML, CSS and Javascript. Going back ten years, could you imagine that frontend developers, who use an interpreted language to write code, would need to mess with all kinds of compilation tools in their daily job? Pretty insane, isn't it?

But Rome wasn't built in a day. Let's travel back in time to see how we got here step by step.